fuzzuli
URL fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.
Details
Category: Discovery
Publisher: trickest-mhmdiaa
Created Date: 8/8/2022
Container: quay.io/trickest/fuzzuli:v1.1.4
Source URL: https://github.com/musana/fuzzuli
Parameters
Command:
-pt
- paths. separate with commas to use multiple paths. e.g. /,/db/,/old/ (default /)Command:
-mt
- avaible methods: regular, withoutdots, withoutvowels, reverse, mixed, withoutdv, shuffle, allCommand:
-pf
- prefix to add to URLsCommand:
-rm
- remove specified charCommand:
-sl
- silent modeCommand:
-sf
- suffix to add to URLsCommand:
-es
- exclude domain that contains specified string or char; supports OR operand google|bing|yahoo (default #)Command:
-rp
- replace specified charCommand:
-to
- timeout in seconds. (default 10)Command:
-px
- http proxy to useCommand:
-f
- input file containing a list of hosts/domainsCommand:
-p
- print urls that is sent requestCommand:
-ua
- user agent (default Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0)Command:
-hm
- HTTP Method. (default HEAD)Command:
-sc
- match response with specified status code (default 200)Command:
-ct
- match response with specified content typeCommand:
-w
- worker count (default 16)Command:
-dl
- match domain length that specified. (default 40)Command:
-jw
- just generate wordlist do not http requestCommand:
-cl
- match response with specified minimum content length. e.g. >100 (default 100)Command:
-ex
- default (rar, zip, tar.gz, tar, gz, jar, 7z, bz2, sql, backup, war)