fuzzuli
URL fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.
Details
Category: Discovery
Publisher: trickest-mhmdiaa
Created Date: 8/8/2022
Container: quay.io/trickest/fuzzuli:v1.1.4
Source URL: https://github.com/musana/fuzzuli
Parameters
paths
string
Command:
-pt
- paths. separate with commas to use multiple paths. e.g. /,/db/,/old/ (default /)method
string
Command:
-mt
- avaible methods: regular, withoutdots, withoutvowels, reverse, mixed, withoutdv, shuffle, allprefix
string
Command:
-pf
- prefix to add to URLsremove
string
Command:
-rm
- remove specified charsilent
boolean
Command:
-sl
- silent modesuffix
string
Command:
-sf
- suffix to add to URLsexclude
string
Command:
-es
- exclude domain that contains specified string or char; supports OR operand google|bing|yahoo (default #)replace
string
Command:
-rp
- replace specified chartimeout
string
Command:
-to
- timeout in seconds. (default 10)http-proxy
string
Command:
-px
- http proxy to useinput-file
file
requiredCommand:
-f
- input file containing a list of hosts/domainsprint-urls
boolean
Command:
-p
- print urls that is sent requestuser-agent
string
Command:
-ua
- user agent (default Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0)http-method
string
Command:
-hm
- HTTP Method. (default HEAD)status-code
string
Command:
-sc
- match response with specified status code (default 200)content-type
string
Command:
-ct
- match response with specified content typeworker-count
string
Command:
-w
- worker count (default 16)domain-length
string
Command:
-dl
- match domain length that specified. (default 40)just-wordlist
boolean
Command:
-jw
- just generate wordlist do not http requestcontent-length
string
Command:
-cl
- match response with specified minimum content length. e.g. >100 (default 100)file-extensions
string
Command:
-ex
- default (rar, zip, tar.gz, tar, gz, jar, 7z, bz2, sql, backup, war)