mattjegan / wtfuzz Goto Github PK

At the moment, we only fuzz immediately after the url, we need some way to fuzz other things. Something like wtfuzz http://my-url-here.com/somedata?i=$1&q=$2 where $1 and $2 indicates we should fuzz those locations in the url.

Feature: -m http_method where http_method=GET|POST|PUT|PATCH
Relates to #4

A user would use this flag to force the requests to be a different http method other than GET

Feature: -c pairs where pairs is zero or more of the following [http_statuscode, color] and colour is one of red|green|yellow|blue|black|magenta|cyan|white as used by crayons

A user might want to customize the status codes they see most often.

At the moment, wtfuzz requires the inclusion of http:// or https:// before a url so that requests doesn't error. This should be detected and added/prompted so that we don't crash.

Either:

wtfuzz myurlhere.com words.txt
Did you mean [1] http or [2] https? 
>> 1

or

wtfuzz myurlhere.com words.txt
Prepending protocol: http://myurlhere.com

https://docs.pytest.org/en/latest/

It would be good to get some decent tests in as well as coverage reports. I'll setup travis and codecov at some point.

Feature: -b http_body where http_body is the body of the requests being sent.
Relates to #3

If -m POST|PATCH|PUT is set, then we need someway of specifying the http body.

At the moment you need to enter one KeyboardInterrupt per thread to halt the program, this should be a single interrupt.