xmendez / wfuzz

Web application fuzzer
http://wfuzz.io
GNU General Public License v2.0
5.94k stars 1.39k forks source link

Authorization fuzz #330

Open JackandBlackLLL opened 2 years ago

JackandBlackLLL commented 2 years ago

Sorry for posting here, but I don't know where else to ask this question. I'm trying to brute-force basic authentication. She looks like Authorization: Basic Z3NlZ3NlOmdzZWdlcw==

That is, I have to take the login and password and convert to base64. wfuzz -z file,usernames.txt -z file,passwords.txt --zE base64 --basic FUZZ:FUZ2Z https://www.site.com/authentication But it doesn't work, wfuzz just won't run (without any errors). How should I use encoder to get the payload gsegse:gseges first, then convert that to base64 ?