projectdiscovery / nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.
https://docs.projectdiscovery.io/tools/nuclei
MIT License
18.35k stars 2.33k forks source link

add -reqfile or -reqpath and -randfuzz option to add request.txt file in the fuzz attack #4956

Open mb01LINX opened 3 months ago

mb01LINX commented 3 months ago

Imagine that I have a request.txt file structured as follows:

Method: GET Host: example.com Path: /api/resource Parameters:

In this context, the adaptation of the fuzz-template from the projectdiscovery/fuzzing-templates repository involves inserting the payload into the body, parameters, headers, and other relevant parts of the request. and how if i have tons of request file at one path?

~BIG-thanks for the tool and your works.. ~BestRegards

GeorginaReeder commented 3 months ago

Thanks so much for opening this issue @mb01LINX , we'll take a look into it!