https://github.com/0xsapra/fuzzparam

https://github.com/0xsapra/fuzzparam

Last synced: 3 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/0xsapra/fuzzparam
• Owner: 0xsapra
• License: mit
• Created: 2021-01-08T17:08:23.000Z (almost 4 years ago)
• Default Branch: main
• Last Pushed: 2021-04-08T04:12:25.000Z (over 3 years ago)
• Last Synced: 2024-06-26T00:35:29.265Z (4 months ago)
• Language: Go
• Size: 432 KB
• Stars: 58
• Watchers: 1
• Forks: 10
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• WebHackersWeapons - fuzzparam
• awesome-hacking-lists - 0xsapra/fuzzparam - (Go)

README

        
# fuzzparam

## What is?

A fast go based param miner to fuzz possible parameters a URL can have.

TL;DR

> Give it list of URL's and it will find the parameters that URL will have

## Download

Download and Build it using following command:

```

$ git clone https://github.com/0xsapra/fuzzparam

$ cd fuzzparam

$ go build fuzzparam.go  

```

## Flags supported

| Flag      | Description | Example |

| ----------- | ----------- | ----------- |

| -X      | HTTP Method       | -X POST |

| -x   | Proxy Url        | -x http://127.0.0.1:8080 |

| -c   | Concurrency/threads(Default 25)        | -c 100 |

| -H   | Headers        | -H "Cookie: test:1" -H "X-Forwarded-For: x.com" |

| -w   | Path to wordlist        | -w ./parameters.txt  |

## Usage

```bash

$ ./fuzzparam -X GET -w ./parameters.txt -H "Cookie: asdf" https://site.com 

```

OR

```bash

$ echo "https://site.com\nhttps://site2.com\nhttps://site.com/asdf.php\n" > domains.txt

$ cat domains.txt | ./fuzzparam -w ./parameters.txt -H "Cookie: asdg"

```

OR, 

use it will other tools. Like projectdiscovery's `httpx`. [https://github.com/projectdiscovery/httpx](https://github.com/projectdiscovery/httpx)

and, tomnonnom's `waybackurls` [https://github.com/tomnomnom/waybackurls](https://github.com/tomnomnom/waybackurls)

```bash

$ cat domains.txt | waybackurls | httpx | fuzzparam -w ./parameters.txt > finalUrlsWithParams.txt

```