Commit graph

48 commits

Author SHA1 Message Date
Joona Hoikkala
fef5f0c78f
Clean up README.md and add CONTRIBUTORS.md (#128) 2019-12-30 13:07:28 +02:00
Tapio Vuorinen
7032f0eb47 -maxtime cli flag to limit running time of ffuf. resolves #85 (#127) 2019-12-30 12:49:34 +02:00
Joona Hoikkala
15524003b8
Write requests and responses to filesystem if requested (#126) 2019-12-28 17:46:44 +02:00
Tapio Vuorinen
f5609a2d13 fuzzing input in result, resolves #76 (#124)
* regexp filter had a copy-paste error talking about size filter, fixed

* implement -mr/-fr FUZZ, detecting if fuzzed input is present in response. resolves #76

* quote regexp control characters to obtain exact matches (according to joohoi's comment)

* allow keywords as part of regexp matching/filtering

* updated changelog

Co-authored-by: Joona Hoikkala <joohoi@users.noreply.github.com>
2019-12-23 13:29:24 +02:00
Tapio Vuorinen
918d5dcc8f count also 429 response codes if -sa (stop on all error cases) is used (#113)
* count also 429 response codes if -sa (stop on all error cases) is used. resolves #83

* Update README.md

Co-Authored-By: Joona Hoikkala <joohoi@users.noreply.github.com>

* Update main.go

Co-Authored-By: Joona Hoikkala <joohoi@users.noreply.github.com>

* lowered the 429 threshold to 20%

Co-authored-by: Joona Hoikkala <joohoi@users.noreply.github.com>
2019-12-20 20:23:54 +02:00
JamTookTheBait
5c1a535fa9 fixed POST data fuzzing example (#119)
-u flag is required
2019-12-08 13:48:53 +02:00
Joona Hoikkala
c33a431716
Limit the use of -e to a single keyword (#106)
* Limit the use of extension to a single wordlist

* Update README
2019-11-16 22:22:14 +02:00
Joona Hoikkala
d4e88ade95
Prepare release 0.12 (#104) 2019-11-16 18:19:07 +02:00
Joona Hoikkala
c29efff5f7
Update README (#103) 2019-11-16 17:31:55 +02:00
Joona Hoikkala
3949e49b3b
Implement -v (verbose) flag (#100) 2019-11-16 16:32:11 +02:00
Joona Hoikkala
ad927ef939
Update readme (#99) 2019-11-16 15:47:57 +02:00
Joona Hoikkala
7aad9c6051
Fix JSON output regression and Stdout race condition issues (#94)
* Fix json output regression and improve stdout printing

* Add changelog entry
2019-11-16 01:48:00 +02:00
Joona Hoikkala
ac141e5e34
Fix the multi wordlist bug and add a new mode of operation (#93)
* Fix the multi wordlist bug and add a new mode

* Add a README entry
2019-11-16 00:40:04 +02:00
Joona Hoikkala
ba1931641c
Release 0.11 (#88) 2019-11-11 00:03:01 +02:00
Joona Hoikkala
5456a37f72
Multiple wordlist support (#79)
* Multiple wordlist support

* Display error correctly if wordlist file could not be opened

* Add back the redirect location

* Support multiple keywords in HTML output and fix wordlist positioning

* Support multiple wordlists for md output

* Support multiple keywords in CSV output

* Improve output for multi keyword runs

* Add changelog entry

* Switch the wordlist filename <-> keyword around to allow tab completion

* Fix the usage example in README
2019-11-10 23:30:54 +02:00
SakiiR
e200bd11f7 Added lines count to filter/matcher and stdout + csv + json (#71)
* Added HTML and Markdown output support

* Add HTML color code in HTML template

* Added lines count

* Added content lines to json + csv

* Added changelog entry

* Fixed copy paste mistake

* Changed the html report to be grepable :)

* Grepable output fixed

* Fixed lines count
2019-11-09 22:09:12 +02:00
SakiiR
826ebbc21c Added HTML and Markdown output support (#63)
* Added HTML and Markdown output support

* Add HTML color code in HTML template

* Added changelog entry

* Fixed copy paste mistake

* Changed the html report to be grepable :)

* Grepable output fixed
2019-11-08 16:18:27 +02:00
Cory
492253b67b Add option for -debug-log. (#74)
* Add options for -disable-logging and -logfile.

Both of these options have to do with the logging surrounding issues
such as #39. Where in that issue the server was returning data after
the connection was closed. Therefore, I added two options one for
completely disabling all of the internal logging functionality aka
sending it to /dev/null. Another for writing the logging information
to a file so it can be retrieved later if need be.

* Changed to automatically disable internal logging.

Per the changes requested by @joohoi, changed to a single
flag `-debug-log` which will place all of the internal logging
into the specified file. If the file fails to be opened or is
not specified it will disable the logging.

* Update readme with the changes for -debug-log.
2019-10-20 18:38:11 +03:00
Tapio Vuorinen
44723e2b06 Custom autocalibration strings (#56)
* removed dead(?) code

* Added -acc for custom auto-calibration strings. Resolves #53

* don't use the calibration url templates when custom calibration paths are given

* added changelog entry about -acc flag
2019-10-15 15:38:45 +03:00
SakiiR
081e40f97e Added redirect location in stdout output (#59)
* Added redirect location in stdout output

* Keep conditional logic outside of the resultNormal function + Better help message for redirect location

* Moved GetRedirectLocation as a Response public method

* Added changelog entry + (Redirect become ->)
2019-10-14 11:29:37 +03:00
Tapio Vuorinen
55662e607a Http verb fuzzing (#57)
* typo fix

* Allow fuzzing of http method. Resolves #54
2019-09-02 17:18:36 +03:00
Tapio Vuorinen
08c4cb4f6f Added support for using ranges in size, word count or status code matching/filtering (#47)
* allow ranges on response size matching/filtering

* allow ranges on word count matching/filtering

* allow ranges on http status matching/filtering

* documentation update about using ranges in size, word count and status code filtering/matching

* moved valuerange code to ffuf main package
2019-06-27 18:26:19 +03:00
Tapio Vuorinen
cb37501616 Support for more curl opts (-i, --data-ascii/-binary, -b/--cookie) (#38)
* added -data-ascii and -data-binary for curl compatibility

* README update

* README update regarding -i and -cookie

* README update on -data-ascii and -data-binary
2019-06-26 22:44:52 +03:00
Joona Hoikkala
58069582ca
Release010 (#41)
* Prepare release 0.10

* Readme fixes
2019-06-17 00:46:43 +03:00
Joona Hoikkala
8883aea432
New input provider --input-cmd (#40)
* New input provider: command

* Set env var and move to Windows and POSIX constants for shell instead of CLI flag.

* Display position instead of input payload when --input-cmd is used

* Update README

* Fix README and flags help

* Add an example to README
2019-06-17 00:42:42 +03:00
Joona Hoikkala
cab7657257
Copy as curl compatibility (#37) 2019-06-05 00:26:27 +03:00
Tapio Vuorinen
0295abb917 Wordlist standard input mode (#36)
* ignore the compiled binary

* added possibility to read wordlist from standard input with -w -

* Update README.md

Co-Authored-By: Joona Hoikkala <joohoi@users.noreply.github.com>

* Update main.go

Co-Authored-By: Joona Hoikkala <joohoi@users.noreply.github.com>

* updated changelog about the wordlist standard input mode

* Update README.md

Co-Authored-By: Joona Hoikkala <joohoi@users.noreply.github.com>
2019-06-04 15:20:31 +03:00
Joona Hoikkala
5264d85fc6
Update README.md and help texts (#32) 2019-04-27 10:47:24 +03:00
Corben Leo
752002d56b Add -timeout flag for customizable HTTP Request timeouts (#31)
* Add -timeout flag to specify HTTP request timeouts
2019-04-27 10:29:05 +03:00
Joona Hoikkala
4d0977a7d8
Feature to autocalibrate the size and word count filters (#30) 2019-04-20 20:46:43 +03:00
Joona Hoikkala
11ece7db17
Release 0.9 done (#28) 2019-04-13 16:28:47 +03:00
Joona Hoikkala
4ba34331ae
Release 0.9 (#27) 2019-04-13 16:24:43 +03:00
Joona Hoikkala
5cae980767
Add wildcard option to status code matcher (#26) 2019-04-13 16:02:00 +03:00
Joona Hoikkala
4b0be687f2 Add -e flag to append extensions to wordlist entries and -D for DirSearch wordlist format compatiiblity 2019-04-11 01:46:48 +03:00
Joona Hoikkala
950a9e8c8f
Fix verifytls (#22)
* Fix wording and make tls verify more intuitive

* Fix README.md
2019-04-06 18:54:27 +03:00
Joona Hoikkala
b9c9c92418
Connection error handling, and options to stop execution (#15) 2019-04-03 23:11:49 +03:00
Joona Hoikkala
d5fe00e330
Update README.md (#14) 2019-04-03 13:02:08 +03:00
Sebastian Lawniczak
9934cfdfc3 Add output to CSV file (#12) 2019-04-03 12:51:42 +03:00
Joona Hoikkala
9aa7e3cd65
Update README 2019-03-30 01:45:47 +02:00
Joona Hoikkala
582aa00833
Added proxy functionality 2019-01-21 22:43:04 +02:00
Joona Hoikkala
4563a93b46
Add delay option to ffuf 2018-12-06 00:57:42 +02:00
Joona Hoikkala
c9217e39f5
Get rid of the last external dependency 2018-11-15 00:18:43 +02:00
Joona Hoikkala
b86ac262f3
Doc fixes 2018-11-12 23:24:37 +02:00
Joona Hoikkala
a1986d176a
[README] Ascii art 2018-11-12 13:49:57 +02:00
Joona Hoikkala
b7779e002d
[README] Add asciicast of some examples 2018-11-12 12:53:14 +02:00
Joona Hoikkala
d0751706b3
Updated README.md 2018-11-09 15:50:25 +02:00
Joona Hoikkala
0875ade878
Regex filter not yet implemented 2018-11-08 11:29:26 +02:00
Joona Hoikkala
ad2296f55b
Initial commit, v0.1 2018-11-08 11:26:32 +02:00