Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New functionality to map fired blind payloads back to the initial request #632

Merged
merged 8 commits into from Feb 2, 2023

Conversation

joohoi
Copy link
Member

@joohoi joohoi commented Feb 1, 2023

This PR adds a new functionalities:

  • New default configuration directory structure under XDG_CONFIG_HOME/ffuf (typically /home/username/.config/ffuf)
  • Ffuf job history configurations stored automatically under the configuration directory
  • New fuzz keyword FFUFHASH that is unique for each payload. Intended to be used in for example callback subdomain
  • CLI parameter -search that searches through ffuf job history and maps a provided hash back to initial request

pkg/ffuf/history.go Fixed Show fixed Hide fixed
@joohoi joohoi merged commit 9bddff7 into master Feb 2, 2023
@joohoi joohoi deleted the ffufhash branch February 2, 2023 13:39
@joohoi joohoi restored the ffufhash branch February 2, 2023 13:39
joohoi added a commit that referenced this pull request Feb 3, 2023
…uest (#632)

* Fix ioutil deprecation and use xdg paths instead (wip)

* Clean up deprecated ioutil references, add config directory structure creation and run entry creation

* Add wordlist position setting and FFUFHASH variable

* Save full wordlist paths and print out a raw request when searched

* Cast from string to 32bit integer, 2billion should be enough for a position

* Use correct format strings for float
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant