ffuf / ffuf

Fast web fuzzer written in Go
MIT License
12.48k stars 1.29k forks source link

Using gnu_parallel to fuzzing directory issues with parallel calls to ffuf #471

Open kenyon-wong opened 3 years ago

kenyon-wong commented 3 years ago

I often use the gnu_parallel tool to parallelize my scanning tasks when writing simple shell scripts on Linux, but I recently encountered a problem when using this tool to call ffuf, I found that I can run ffuf through gnu_parallel normally, but there is always no scan result output at the end, I tried many methods, but still can't solve the problem, can anyone help me?

I tried both options in the shell script and neither output the results properly

└─# cat ffuf_paralle_test.sh
#!/bin/bash

# PUT=targets.txt
# DIR=

# cat $PUT |parallel "ffuf {}/FUZZ -o result_{//}.txt"UUPUT_TARGETS=/root/ffuf/wordlist.txt

PUT_DICC=/root/ffuf/wordlist.txt
PUT_TARGETS=/root/ffuf/targets.txt

# cat $PUT_TARGETS |parallel -j 32 "ffuf -w $PUT_DICC -u {}/FUZZ -mc all -fs 42 -c -of json -o /root/ffuf/result_{/}.json -v"
cat $PUT_TARGETS |parallel -j 32 "ffuf -w $PUT_DICC -u {}/FUZZ -mc all -fs 42 -c -of json -o result_{/}.json -v"

# for line in `cat $PUT_TARGETS`
# do
#       echo ${line}
#       echo "ffuf -w $PUT_DICC -u ${line}/FUZZ -mc all -fs 42 -c -of json -x /root/ffuf/restlt_${line}.json -v"
#       ffuf -w $PUT_DICC -u ${line}/FUZZ -mc all -fs 42 -c -of json -o /root/ffuf/restlt_${line}.json -timeout 3 -v
# done
xorlock commented 2 years ago

I am having similar issues...

bsysop commented 2 years ago

Hi everyone,

First of all, I recommend you to use rush since it is made in golang and it uses very low resources compared with GNU Parallel.

Second, running 32 threads of GNU/Parallel at the same time, means you need a lot ( A LOT ) of memory, if you are running from a VPS, the VPS itself will kill ffuf to keep the server alive.

Are you sure your server/computer is not killing ffuf instances?

ffuf command and args 2> error.log
ffuf -debug-log ffuf-debug.log 2> error.log
eSlider commented 10 months ago

What about to use xargs out of the linux box?