Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update README #9

Merged
merged 1 commit into from Mar 29, 2019
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
17 changes: 16 additions & 1 deletion README.md
Expand Up @@ -75,7 +75,7 @@ To define the test case for ffuf, use the keyword `FUZZ` anywhere in the URL (`-
Header "Name: Value", separated by colon. Multiple -H flags are accepted.
-V Show version information.
-X string
HTTP method to use. (default "GET")
HTTP method to use (default "GET")
-c Colorize output.
-d string
POST data.
Expand All @@ -96,9 +96,15 @@ To define the test case for ffuf, use the keyword `FUZZ` anywhere in the URL (`-
Match HTTP response size
-mw string
Match amount of words in response
-o string
Write output to file
-of string
Output file format. Available formats: json (default "json")
-p delay
Seconds of delay between requests, or a range of random delay. For example "0.1" or "0.1-2.0"
-s Do not print additional information (silent mode)
-sf
Stop when > 90% of responses return 403 Forbidden
-t int
Number of concurrent threads. (default 40)
-u string
Expand All @@ -118,6 +124,15 @@ eg. `ffuf -u https://example.org/FUZZ -w /path/to/wordlist`

The only dependency of ffuf is Go 1.11. No dependencies outside of Go standard library are needed.

## Changelog

- v0.8
- New
- New CLI flag to write output to a file in JSON format
- New CLI flag to stop on spurious 403 responses
- Changed
- Regex matching / filtering now matches the headers alongside of the response body

## TODO
- Tests!
- Option to follow redirects
Expand Down