wfuzz
Web fuzzer: paths, parameters, subdomains and headers.
A very flexible web fuzzer: it replaces the FUZZ keyword anywhere in the request (path, parameter, header, body) and iterates a wordlist. Good for parameter discovery, vhost fuzzing and form brute force, filtering by code, size or word count.
Family Web discovery & fuzzing
Flags -w --hc --hh -H FUZZ
Concepts Web Content Discovery (Directory Fuzzing), Virtual Host Fuzzing
Cheatsheet Discovery & fuzzing
Installation
sudo apt install -y wfuzzUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- AlertHackTheBox
- BackendHackTheBox
- BartHackTheBox
- BigPivotingDockerLabs
- BitforgeProving Grounds Practice
- BlackMarket 1VulnHub
- BountyHackTheBox
- BuscaloveDockerLabs
- Cereal 1VulnHub
- GreenHornHackTheBox
- Hacker Kid 1.0.1VulnHub
- HealHackTheBox
- Infovore 1VulnHub
- LateHackTheBox
- LinkVortexHackTheBox
- MonsterProving Grounds Practice
- NorCDockerLabs
- PandoraHackTheBox
- PsychoDockerLabs
- ResourceHackTheBox
- ShoppyHackTheBox
- TeacherHackTheBox
- TrickHackTheBox
- WallaProving Grounds Practice