WebFuzzForge / wenum

Wfuzz fork
GNU General Public License v2.0
19 stars 6 forks source link

Doublecheck the necessity of the --ip option #36

Open percepo opened 1 year ago

percepo commented 1 year ago

The --ip option enables a constellation where its possible to force connect a specific IP and still present a host name in the SNI field. This is a really niche functionality, but it may be important in specific scenarios. It depends on whether the SNI field is all that important to be correct. I know servers can behave different depending on the Host header, but I dont know for sure if it really is only the host header that interests them, or if its rather the SNI field that gets adjusted based on it, especially considering that wenum doesnt care much about proper handshakes (MITM is kind of not a threat vector for this tool anyways), as long as the connection to the right target is established.