printers not working fine in the library

[javixeneize]

Hi

Im trying the printer option in the library and it doesnt seem to work correctly

According to the doc, it says:

-o filename,printer equals to printer=(“printer”, “filename”)

I dont want to specify filename, just the format of the report. It still needs the filename

On top of that, the order is incorrect. it is printer=(filename,printer). See below

for r in wfuzz.get_payload(["GET","HEAD","POST","TRACE","OPTIONS"]).fuzz(url='http://localhost:5000/', method="FUZZ", printer=("t2","json")):
print r

And to finish, it doesnt do anything, it prints r in the default format, and t2 is empty

Let me know if i can help to solve any of the issues, as i find the tool quite useful

Thanks

[xmendez]

Hi,

-o options prints the results in a file using the specified format it does not change the main output as before.

The order is incorrect in the documentation but the option works for me. For example:

import wfuzz
for r in wfuzz.get_payload(range(10)).fuzz(url='http://testphp.vulnweb.com/FUZZ', printer=("/tmp/1", "raw")): print r
Then /tmp/1 contains the results.

cheers

[javixeneize]

Hi

I dont wnat to print it in a file i just want to format the output

The equivalent command using CLI is this

python wfuzz.py -o json -w wordlist/general/test.txt http://localhost:5000/FUZZ

How should it be done using the library?
Thanks

[xmendez]

You can't format the main output. The last command using the CLI does not change the main output. It will create a file named json containing the results formatted using the raw printer.

The library does not format the output, it gives you results. It is up to you what to do with the results.

[javixeneize]

Hi

No, the command line doesnt work like that

If i execute python wfuzz.py -o csv -w wordlist/general/test.txt http://localhost:5000/FUZZ it doesnt store the data in a file called csv. It prints the result in a csv format

with wfuzz -e printers you can see all the options you have

In fact, having the response served as a json is something that i really like :)

Thanks

[xmendez]

You are using an old version. wfuzz.py does not even exist in the newer versions.
Do --version to check the version.

This was changed to avoid having to do redirects when storing results. Now you can see the output and store at the same time.

Cheers

[javixeneize]

You are right... if i use wfuzz directly (2.2.2) that option is not available. I was using version 2.1.5 with python wfuzz.py

I think returning the response in a json format is fantastic! Is there any way this can be included in this version?

If not, can i modify wfuzz to include this?

Thanks!