Wfuzz(支持各种web漏洞扫描的工具)

The tool is based on dictionaries and ranges, you choose where you want to bruteforce just by replacing the part of the URL or the POST by the keyword FUZZ.
+t2c|Qp&B0
wE0IA7A-{X b'g,o0Check the video to see it running: Video

• - wfuzz.py -c -z file -f wordlists/commons.txt --hc 404 --html http://www.mysite.com/FUZZ 2> results.html

• This will bruteforce the site http://www.mysyte.com/FUZZ in search of resources (directories, scripts, files,etc), it will hide from the output the return code 404 (for easy reading the results), it will use the dictionary commons.txt for the bruteforce, and also will output the results to the results.html
  9qw qr7XN+GjtI!b0file (with a cool format to work).
  ~ENAh0
  :[PFh4Q0

• wfuzz.py -c -z range -r 1-100 --hc 404 http://www.mysite.com/list.asp?id=FUZZ

• In this example instead of using a file as dictionary, it will use a range from 1-100, and will bruteforce the parameter "id".IXPUB技术博客:q'Qy!x uRD!d0v{7i
  
  "Zjk/zHUsA|0

• wfuzz.py -c -z file -f wordlists/commons.txt --hc 404 --html -d "id=1&catalogue=FUZZ"
      http://www.mysite.com/check.asp 2 > results.html

  
  [.~@C
  D&vI0
• Here you can see the use of POST data, with the option "-d".IXPUB技术博客R%w;\cMBh E
  
  O(p;S3lLv0

• wfuzz.py -c -z file -f wordlists/commons.txt --hc 404 -R 1 http://www.mysite.com/FUZZ

• Example of path discovery, using a recursive level of 1 paths.

• wfuzz.py -c -z file -f wordlists/Injection/SQL.txt -V allvars http://www.mysite.com/res.asp?id=1&name=cars&cat=2

• Example of Sql injection on every parameter of the request, you can fuzz every parameter with the option "-V allvars".