Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pencode #717

Merged
merged 3 commits into from
Sep 12, 2023
Merged

Pencode #717

merged 3 commits into from
Sep 12, 2023

Conversation

joohoi
Copy link
Member

@joohoi joohoi commented Sep 12, 2023

Integrate the https://github.com/ffuf/pencode to ffuf as a library.

Users can encode/hash the input content using all the available options for pencode itself:

  b64encode         - Base64 encoder
  hexencode         - Hex string encoder
  jsonescape        - JSON escape
  unicodeencodeall  - Unicode escape string encode (all characters)
  urlencode         - URL encode reserved characters
  urlencodeall      - URL encode all characters
  utf16             - UTF-16 encoder (Little Endian)
  utf16be           - UTF-16 encoder (Big Endian)
  xmlescape         - XML escape
  b64decode         - Base64 decoder
  hexdecode         - Hex string decoder
  jsonunescape      - JSON unescape
  unicodedecode     - Unicode escape string decode
  urldecode         - URL decode
  xmlunescape       - XML unescape
  md5               - MD5 sum
  sha1              - SHA1 checksum
  sha224            - SHA224 checksum
  sha256            - SHA256 checksum
  sha384            - SHA384 checksum
  sha512            - SHA512 checksum
  lower             - Convert string to lowercase
  upper             - Convert string to uppercase

Example usage:

ffuf -w 'wordlist.txt' -w 'wordlist2.txt:ENCODEME' -u 'https://target.tld/FUZZ?key=ENCODEME' -enc 'ENCODEME:utf16 b64encode'

@joohoi joohoi merged commit ca2224c into master Sep 12, 2023
3 checks passed
@CodeWizardAdil
Copy link

ffuf -H 'Content-Type: application/json' -X 'POST' -mode 'clusterbomb' -w users.txt:UFUZZ -w rockyou.txt:PFUZZ -enc 'PFUZZ:b64encode' -d '{"username": "UFUZZ","password": "PFUZZ"}' -u 'https://api.demoblaze.com/login' -x 'http://localhost:8080'
flag provided but not defined: -enc

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants