DIRECTORY/FILES FUZZING
=======================Use and review
https://raw.githubusercontent.com/six2dez/OneListForAll/main/onelistforallshort.txt
=======================Wfuzz :
>>> wfuzz -c -w /usr/share/wfuzz/wordlist/general/megabeast.txt $IP:80/FUZZ
>>> wfuzz -c -z file,/usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt --sc 200 http://$IP/FUZZ/
>>>wfuzz -c -w /usr/share/seclists/Discovery/Web_Content/raft-large-files.txt $IP/FUZZ --hc 404
>>>wfuzz -c -w /usr/share/seclists/Discovery/Web_Content/raft-large-directories.txt $IP/FUZZ/ --hc 404
>>> wfuzz -c -z file,/usr/share/seclists/Fuzzing/SQLi/quick-SQLi.txt -d "myusername=john&mypassword=FUZZ&Submit=Login” --hc 404 $URL
=======================Dirsearch :
>>> python3 dirsearch.py -u $URL -w /opt/seclists/Discovery/Web-Content/raft-large-files.txt
=======================FFUF :
>>>ffuf -u $URL -c -w /opt/seclists/Discovery/Web-Content/raft-large-files.txt -t 100
>>>ffuf -recursion -c -e '.htm','.php','.html','.js','.txt','.zip','.bak','.asp','.aspx','.xml','.py','.log','.json','.old' -w /usr/share/dirbuster/wordlists/directory-list-2.3-medium.txt -u http://$IP:8080/FUZZ
>>> ffuf -recursion -mc all -ac -c -e .htm,.shtml,.php,.html,.js,.txt,.zip,.bak,.asp,.aspx,.xml -w /usr/share/dirbuster/wordlists/directory-list-2.3-medium.txt -u https://url.com/FUZZ
=======================Frexbuster :
>>>feroxbuster -u http://IP/ -x htm php html js txt zip bak asp aspx xml py -r -o 80-ferox.txt -w /usr/share/seclists/Discovery/Web-Content/raft-large-directories-lowercase.txt -t 100
=======================Gobuster :
>>> gobuster dir -u $URL -w /opt/seclists/Discovery/Web-Content/raft-small-words.txt
Last updated