2 releases

0.1.1 Apr 21, 2020
0.1.0 Apr 21, 2020

#10 in #pentesting

MIT license

23KB
389 lines

fuzz-rs

fuzz is a bruteforce/fuzzing tool written in rust to be working right away.

Requires rust nightly to build

Currently supported

Feature Description
httpdir http directory fuzzer/buster

HttpDir mode

Basic usage:

fuzz httpdir http://example.com

-w default is common.txt.

--default-ext will use extensions_common.txt.

Full usage:

USAGE:
    fuzz.exe httpdir [FLAGS] [OPTIONS] <TARGET>

ARGS:
    <TARGET>

FLAGS:
        --default-ext    Use default extention list (adds to -x if any)
    -e, --expand-url     Show full url (rather than /<word>)
    -g, --gzip           Compresss requests qith gzip
    -h, --help           Prints help information
    -f, --print-fails    Print/output non-success requests
        --silent         Disable console output
    -V, --version        Prints version information

OPTIONS:
    -d, --delay <delay>                    Minimum delay between word processing [default: 0]
    -x, --extentions <extentions>...       List of file extentions to append to word
        --ignore-code <ignore-codes>...    List of status codes to ignore
    -o, --out-file <out-file>              Save output to specified file
    -P, --password <password>              Basic auth password
    -t, --threads <threads>                Number of threads to use for fuzzing [default: 10]
        --timeout <timeout>                Http timeout in ms [default: 0]
        --agent <user-agent>               Request user agent
    -u, --username <username>              Basic auth username
    -w, --word-list <word-list>            Input work list used to fuzz

Dependencies

~10–14MB
~264K SLoC