Wfuzz plugin

WIP to include wfuzz directory brute forcing
This commit is contained in:
Christian Martorella 2018-03-22 23:50:30 +01:00
parent 1c6db58d6e
commit 58b3853b1d
6 changed files with 42 additions and 11 deletions

11
README
View file

@ -99,17 +99,6 @@ Changelog in 2.7:
-Removed 123people
-Fixed Bing cookies order
Changelog in 2.6:
------------------
-Added Yahoo and Baidu search engines. Thanks to Tatanus
-Added check for the existence of Requests library.
-Fixed email regex to provide cleaner results. Thanks to Peter McAlpine
Changelog in 2.5:
-----------------
-Replaced httplib by Requests http library (for Google related)
-Fixed Google searches
Comments? Bugs? Requests?
------------------------

35
discovery/wfuzz_search.py Normal file
View file

@ -0,0 +1,35 @@
import string
import requests
import sys
import myparser
import re
try:
import wfuzz
except Exception, e:
print e
class search_wfuzz:
def __init__(self, host):
self.host = host
self.results = ""
self.totalresults = ""
def do_search(self):
print "elo"
try:
for r in wfuzz.fuzz(url="https://"+self.host+"/FUZZ", hc=[404], payloads=[("file",dict(fn="wordlist/general/common.txt"))]):
print r
self.results += r
except Exception, e:
print e
self.totalresults += self.results
def get_results(self):
return self.totalresults
def do_check(self):
return
def process(self):
self.do_search()
print "\tSearching Wfuzz.."

0
lib/port_scanner.py Normal file
View file

BIN
stash.sqlite Normal file

Binary file not shown.

BIN
test.sqlite Normal file

Binary file not shown.

View file

@ -0,0 +1,7 @@
admin
test
hello
uk
login
book
robots.txt