search

dark-warlord14 / ffufplus

You can read the writeup on this script here
https://securityjunky.com/ffuf-on-steroids/
191 stars 43 forks source link

Option -e extends FUZZ keyword #9

Closed maverickNerd closed 4 years ago

maverickNerd commented 4 years ago

As ffuf docs say -e options just appends/extends FUZZ, so we need to put dot(.) so that extensions behave like ext.

Discuss with @joohoi on this too before making fix.

dark-warlord14 commented 4 years ago

Hey @maverickNerd,

I am attaching an image here with the previous configuration and it works as intended.

image

Can you please recheck the addition of [.] on you local machine just to check if it works as we want?

Regards, @dark-warlord14

maverickNerd commented 4 years ago

Ohh so your wordlist itself is having . In the end like admin.%EXT%. I use this tool with mostly seclists or any other lists

dark-warlord14 commented 4 years ago

Yes. Actually I have used the wordlist from dirsearch only as most people are familiar with it.

You raise an important point though but if you look at the flags we are using -D which specifies that the wordlist is from dirsearch. So it works as intended. I hope you get the point.

Also in your case, you should remove that -D flag if you are using wordlist other than dirsearch, and hey this is just a wrapper. Feel free to modify and use it as you like.

maverickNerd commented 4 years ago

yeah, I agree with you. Nevermind. trash this pull request. :)