Skip to content

Commit

Permalink
update docs
Browse files Browse the repository at this point in the history
  • Loading branch information
xmendez committed Mar 10, 2019
1 parent 10eaca1 commit 79defa8
Show file tree
Hide file tree
Showing 2 changed files with 16 additions and 1 deletion.
8 changes: 7 additions & 1 deletion docs/user/advanced.rst
Original file line number Diff line number Diff line change
Expand Up @@ -293,7 +293,7 @@ Connect to an specific host

The --ip option can be used to connect to a specific host and port instead of the URL's host and port::

wfuzz -z range,1-1 --ip 127.0.0.1 http://www.google.com/anything/FUZZ
$ wfuzz -z range,1-1 --ip 127.0.0.1 http://www.google.com/anything/FUZZ

This useful, for example, to test if a reverse proxy can be manipulated into misrouting requests to a destination of our choice.

Expand Down Expand Up @@ -704,3 +704,9 @@ For example, the following will return a unique list of HTTP requests including
$ wfpayload -z burplog,a_burp_log.log --slice "params.get~'authtoken' and url.pstrip|u()"

Authtoken is the parameter used by BEA WebLogic Commerce Servers (TM) as a CSRF token, and thefore the above will find all the requests exposing the CSRF token in the URL.

You can also select the field to show, for example::

$ wfpayload -z wfuzzp --zD /tmp/session --field r.params.get
000000002: 200 118 L 455 W 5384 Ch "{'artist': '1'}"
...
9 changes: 9 additions & 0 deletions docs/user/basicusage.rst
Original file line number Diff line number Diff line change
Expand Up @@ -253,3 +253,12 @@ For example, to show results in json format use the following command::
$ wfuzz -o json -w wordlist/general/common.txt http://testphp.vulnweb.com/FUZZ


When in using the default output you can also select what FuzzResult's field to show instead of the payload::

$ wfuzz -z range --zD 0-1 -u http://testphp.vulnweb.com/artists.php?artist=FUZZ --field r
...
000000001: 200 99 L 272 W 3868 Ch GET /artists.php?artist=0 HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Wfuzz/2.4
Host: testphp.vulnweb.com
...

0 comments on commit 79defa8

Please sign in to comment.