adamdecaf / vulnerabilities

Vulnerability teaching showcase
Other
12 stars 4 forks source link

TXT is not an appropriate "database" file format #1

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
First off, thank you for taking the time to organize and maintain a fuzzing
"database".

I noticed that many of the files in the fuzzing "database" are TXT files.
There are better file formats which support things such as comments,
multi-line Strings, binary Strings, Arrays, Hashes, tags, etc. I propose
converting the files in "attack-payloads", "discovery" and "regex" to the
YAML file format (http://www.yaml.org/). YAML is supported by all widely
used programming languages and can automatically serialize/deserialize data.

Original issue reported on code.google.com by postmode...@gmail.com on 23 Apr 2010 at 10:29

GoogleCodeExporter commented 9 years ago
Thanks or the comment. I never looked at the Issues tab before, apology for 
replying 18 months later ;)

There are richer and more complex formats, and you're welcome to use the files 
and re-format them any way you like, as fuzzdb is licensed creative commons, by 
attribution

This is a lightweight format which is easily usable by most web fuzz tools, 
such as burpsuite and others. 

Original comment by uni...@gmail.com on 23 Sep 2011 at 5:57