URL Fuzzer - Discover hidden files and directories

2021-06-14 16:51:41 +05:30 · 2021-06-14 16:51:41 +05:30 · 3e7f011df2
parent 5d858448b7
commit 3e7f011df2
2 changed files with 87679 additions and 0 deletions
--- a/fuzzing/url-fuzzer.yaml
+++ b/fuzzing/url-fuzzer.yaml
@ -0,0 +1,28 @@
+id: url-fuzzer
+
+info:
+  name: URL Fuzzer - Discover hidden files and directories
+  author: Suman Kar
+  severity: info
+  tags: fuzzer
+
+  reference: |
+        - wordlists https://github.com/danielmiessler/SecLists/tree/master/Discovery/Web-Content
+  
+requests:
+  - payloads:
+      dlist: helpers/wordlists/directory-list.txt
+
+    attack: sniper
+    threads: 50
+
+    raw:
+      - |
+        GET {{dlist}}
+        Host: {{Hostname}}
+        Referer: {{BaseURL}}
+
+    matchers:
+      - type: status
+        status:
+          - 200
--- a/helpers/wordlists/directory-list.txt
+++ b/helpers/wordlists/directory-list.txt