fuzzing

Fuzzing test

• HTTP-Header-Fuzzer

HTTP-Header-fuzzer

I create a simple TCP server with fork, HTTP-Header-Fuzzer raise error time-out, but i think the problem come from my TCP server and not LibHTTP.

Github URL

• HTTP-Header-Fuzzer

python3 http_header_fuzzer.py -v -uf url.txt -rt -lt -et -ct -uah -csv report.csv

Options used

• -rt Test if header values appear in HTTP response.
• -lt Test how the length of a header value affects the HTTP response.
• -et Test how the application handles special characters as header values.
• -ct Test how the application handles commands as header values.
• -uah Fuzz the user agent header.

report

• Reflection.
• Length test.
• Special char.
• Command injection.
• Random User-Agent.