Fuzzing

  • Basic wfuzz usage for files:
 wfuzz -c -z file,/usr/share/wordlists/raft-large-files-lowercase.txt --hc 401,403,404 http://$rh/FUZZ
  • Or for directories:
 wfuzz -c -z file,/usr/share/wordlists/raft-large-directories-lowercase.txt --hc 401,403,404 http://$rh/FUZZ/
  • Or for common files/extensions combination:
 wfuzz -c -z file,/usr/share/wordlists/raft-large-files-lowercase.txt -z file,/usr/share/golismero/wordlist/fuzzdb/Discovery/PredictableRes/raft-small-extensions-lowercase.txt --hc 401,403,404 http://$rh/FUZZFUZZ