Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add input wordlist functionality #33

Merged
merged 1 commit into from
Apr 21, 2023
Merged

Add input wordlist functionality #33

merged 1 commit into from
Apr 21, 2023

Conversation

denandz
Copy link
Contributor

@denandz denandz commented Sep 28, 2022

This pull request adds the ability to pass pencode an input wordlist, rather than only accepting input via stdin.

The use case here is when fuzzing something like a JSON or SOAP API with predefined wordlists and ffuf/intruder/whatever. I'd like to be able to pass my attack wordlist to pencode directly, and have it spit out the encoded/escaped versions of the payloads that I can subsequently use to fuzz a specific target without unintentionally breaking the JSON/XML encoder.

@denandz
Copy link
Contributor Author

denandz commented Apr 21, 2023

Hey @joohoi any blockers to getting this merged? Also fixes issue #34 by providing an option to read items from an existing wordlist line-by-line.

@joohoi
Copy link
Member

joohoi commented Apr 21, 2023

Thanks for the ping, and sorry for the late response. No, this looks good. I'm also working on a proper integration of pencode to ffuf itself.

With the integration you will be able to give ffuf a parameter like -encode "FUZZ:b64encode somethingelse templatefile"

@joohoi joohoi merged commit 28131e5 into ffuf:master Apr 21, 2023
@joohoi joohoi mentioned this pull request Apr 21, 2023
@denandz
Copy link
Contributor Author

denandz commented Apr 22, 2023

All good! Thanks Joohoi.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants