Closed psyray closed 3 weeks ago
This PR optimizes directory fuzzing performance by switching to a faster wordlist and reducing scan depth. The changes include updating the default wordlist from 'dicc.txt' to 'fuzz-Bo0oM.txt', setting recursive level to 0, and removing file extensions from the configuration to reduce server load and scan duration while maintaining effective discovery capabilities.
classDiagram
class Configuration {
+String AMASS_DEFAULT_WORDLIST_NAME = "deepmagic.com-prefixes-top50000"
+String AMASS_DEFAULT_WORDLIST_PATH = "Path(RENGINE_WORDLISTS)"
+String FFUF_DEFAULT_WORDLIST_NAME = "fuzz-Bo0oM"
+String FFUF_DEFAULT_WORDLIST_PATH = "Path(RENGINE_WORDLISTS)"
+List FFUF_DEFAULT_MATCH_HTTP_STATUS = [200, 204]
+int FFUF_DEFAULT_RECURSIVE_LEVEL = 0
+boolean FFUF_DEFAULT_FOLLOW_REDIRECT = false
}
Change | Details | Files |
---|---|---|
Updated directory fuzzing configuration to improve performance |
|
web/startScan/fixtures/startScan.json web/fixtures/default_scan_engines.yaml web/config/default_yaml_config.yaml web/scanEngine/fixtures/scanEngine.json |
Refactored wordlist configuration management |
|
web/reNgine/definitions.py web/reNgine/tasks.py |
As reported on the Discord, dir fuzzing is very long to run and generates heavy traffic on the targeted server when using default Full scan engine. So I've changed the default dir dicc by fuzz-Bo0oM, more quick to run and which show a lot of quick findings, reduced the recursivity level to 0 and removed all the extensions.
Tested and working
Details here :
Summary by Sourcery
Update the default wordlist for directory scanning from dicc.txt to fuzz-Bo0oM.txt, reduce the recursive level to 0, and remove file extensions from the configuration. Refactor configuration files to use default wordlist names and paths for Amass and FFUF, enhancing maintainability and centralizing configuration.
Enhancements: