Details

Category: Vulnerabilities

Publisher: trickest-mhmdiaa

Created Date: 2/5/2022

Container: quay.io/trickest/ssrfuzz:34f0e89

Source URL: https://github.com/ryandamour/ssrfuzz

Parameters

​
delay
string
Command: --delay - The time each threads waits between requests in milliseconds (default 100)
​
cookie
string
Command: --cookie - Cookie to use for requests
​
threads
string
Command: --threads - Number of threads to run ssrfuzz on (default 50)
​
timeout
string
Command: --timeout - The amount of time needed to close a connection that could be hung (default 10)
​
verbose
string
Command: --verbose - Verbose output
​
crlf-path
string
Command: --crlf-path - Add CRLF payloads to all available paths (ie: site.com/%0Atest.php)
​
skip-crlf
boolean
Command: --skip-crlf - Skip CRLF fuzzing
​
http-method
string
Command: --http-method - HTTP Method - GET or POST (default GET)
​
skip-scheme
boolean
Command: --skip-scheme - Skip scheme fuzzing
​
skip-network
boolean
Command: --skip-network - Skip network fuzzing
​
slack-webhook
string
Command: --slack-webhook - Slack webhook to send findings to a channel
​
target-domains
file
required
Command: --domains - Location of domains with PARAMETERS to scan
​
custom-user-agent
string
Command: --user-agent - User agent for requests (default Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36)