Skip to content

A customizable and exploratory fuzz-testing tool written in Ruby. Simulates the web browser to create HTTP requests, parse HTML, and mimic user actions. After crawling through the webapp, the fuzzer will discover pages and inputs, then test for vulnerabilities.

Notifications You must be signed in to change notification settings

M-Bowe/web-fuzzer

Repository files navigation

Installation

  • Ensure Ruby is installed and the gem Mechanize is added (gem install mechanize)
  • Pull the master branch of this repository
  • Launch Git Bash inside the repository, please read important note before executing commands.

Part 0: --custom-auth:

An example of properly using --custom-auth: ruby fuzzer.rb test http://127.0.0.1/dvwa/index.php --custom-auth=dvwa

Part 1: discover:

An example of properly using the discover command: ruby fuzzer.rb discover http://localhost/dvwa --custom-auth=dvwa --common-words=/words.txt

Part 2: test:

An example of properly using the test command: ruby fuzzer.rb test http://localhost/dvwa --custom-auth=dvwa --common-words=/words.txt --vectors=/vectors.txt --sensitive=my_sensitive_data_file.txt --random=true --slow=100

About

A customizable and exploratory fuzz-testing tool written in Ruby. Simulates the web browser to create HTTP requests, parse HTML, and mimic user actions. After crawling through the webapp, the fuzzer will discover pages and inputs, then test for vulnerabilities.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages