x8
The tool helps to find hidden parameters that can be vulnerable or can reveal interesting functionality that other hunters miss. Greater accuracy is achieved thanks to the line-by-line comparison of pages, comparison of response code and reflections.
Details
Category: Fuzzing
Publisher: trickest
Created Date: 7/22/2021
Container: quay.io/trickest/x8:ab1ba6c-patch-1
Source URL: https://github.com/Sh1Yo/x8
Parameters
Command:
--max - Change the maximum number of parameters per request. (default is <= 256 for query, 64 for headers and 512 for body)Command:
--url - You can add a custom injection point with %s. Multiple values are supported: https://url1 http://url2Command:
--body - Example body: '{x:{%s}}'Command:
--http - HTTP version. Supported versions: --http 1.1, --http 2Command:
--port - Port to use with request fileCommand:
--test - Prints request and responseCommand:
--delay - Delay between requests in milliseconds [default: 0]Command:
--force - Force searching for parameters on pages > 25MB. Remove an error in case there's 1Command:
--proto - Protocol to use with request file (default is https)Command:
--proxy - ProxyCommand:
--encode - Encodes query or body before making a request, i.e & -> %26, = -> %3DCommand:
--invert - By default, parameters are sent within the body only in case PUT or POST methodsCommand:
--joiner - How to join parameter templates. Example: --joiner '&'. Default: urlencoded - '&', json - ', ', header values - '; 'Command:
--method - Multiple values are supported: -X GET POSTCommand:
--strict - Only report parameters that have changed the different parts of a pageCommand:
--verify - Verify found parameters.Command:
-H - Example: 'one:one' 'two:two'Command:
--request - The file with the raw http requestCommand:
--timeout - HTTP request timeout in seconds. [default: 15]Command:
--verbose - Verbose level 0/1/2 [default: 1]Command:
--workers - The number of concurrent url checks. [default: 1]Command:
--split-by - Split the request into lines by the provided sequence. By default splits by
,
and
Command:
--url - You can add a custom injection point with %s. Multiple values are supported: https://url1 http://url2Command:
--wordlist - -w, --wordlist <wordlist>Command:
--data-type - -t, --data-type <data-type>Command:
-c - The number of concurrent requests per url [default: 1]Command:
--replay-once - If a replay proxy is specified, send all found parameters within one request.Command:
--check-binary - Check the body of responses with binary content typesCommand:
--remove-empty - Skip writing to file outputs of url:method pairs without found parametersCommand:
--replay-proxy - Request target with every found parameter via the replay proxy at the end.Command:
--custom-values - Values for custom parameters (default is 1 0 false off null true yes no)Command:
--mimic-browser - Add default headers that browsers usually set.Command:
--output-format - standart, json, url, request [default: standart]Command:
--disable-colors - Disable colorsCommand:
--learn-requests - Set the custom number of learn requests. [default: 9]Command:
--param-template - %k - key, %v - value. Example: --param-template 'user[%k]=%v'. Default: urlencoded - <%k=%v>, json - <%k:%v>, headers - <%k=%v>Command:
--reflected-only - Disable page comparison and search for reflected parameters only.Command:
--recursion-depth - Check the same list of parameters with the found parameters until there are no new parameters to be found. Conflicts with --verify for now.Command:
--disable-trustdns - Can solve some dns related problemsCommand:
--follow-redirects - Follow redirectionsCommand:
--progress-bar-len - [default: 26]Command:
--custom-parameters - Check these parameters with non-random values like true/false yes/no (default is admin bot captcha debug disable encryption env show sso test waf)Command:
--one-worker-per-host - Multiple urls with the same host will be checked one after another,Command:
--disable-progress-bar - Disable progress barCommand:
--disable-additional-checks - Disable additional checksCommand:
--disable-custom-parameters - Do not automatically check parameters like admin=true