Web Fuzzing

Ffuf

Using ffuf to fuzz a POST payload with two wordlists at once:

ffuf -w ./dirs.txt:DIR -w filenames.txt:FILENAME \
     -u http://backend/api/v1/admin/file \
     -H 'Content-Type: application/json' \
     -X POST \
     -d '{"file":"/var/www/DIR/FILENAME.py"}'
PreviousCommon IdentifiersNextDirectory Enumeration

Last updated