https://github.com/proditis/bbfuzzgun
experimental project with automated checks for our projects
https://github.com/proditis/bbfuzzgun
Last synced: 4 months ago
JSON representation
experimental project with automated checks for our projects
- Host: GitHub
- URL: https://github.com/proditis/bbfuzzgun
- Owner: proditis
- Created: 2022-04-29T17:32:37.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2022-12-21T11:00:10.000Z (over 3 years ago)
- Last Synced: 2025-05-27T04:12:15.867Z (about 1 year ago)
- Language: Dockerfile
- Size: 7.81 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# (WIP) BBFuzzGun
**NOTE** THIS IS EXPERIMENTAL
A small container with tools offensive security tools to test https://github.com/echoCTF/echoCTF.RED before each release.
The initial idea for this was born out of the necesity to fuzz our projects before release in a context that not only discovers vulnerabilities but also misconfigurations, errors and crashes.
## What this container does
* Checks nginx configurations that are passed as volumes under **`/checks/nginx/`** folder (eg `-v ./local/nginx.conf:/checks/nginx/some.conf`)
* Checks with `ffuf` the main url + given url lists hunting for status codes `429` (rate limit) and `>=500`
* performs paramspider
* performs phpcs security checks
*
## How to run
```shell
docker run -it --rm \
-v $PWD/files/participantUI.conf.j2:/checks/nginx/participantUI.conf:ro \
-v $PWD/files/moderatorUI.conf.j2:/checks/nginx/moderatorUI.conf:ro \
-v $PWD/reports:/checks/reports \
bbfuzzgun /start.sh -H "Host: echoctf.local" https://192.168.1.25FUZZ
```
## Included Tools
* Leaky Paths wordlists
* smuggler.py (https://github.com/gwen001/pentest-tools)
* ParamSpider https://github.com/devanshbatham/ParamSpider/
* FFuF https://github.com/ffuf/ffuf/
* Dirdar https://github.com/m4dm0e/dirdar@latest
* subfinder https://github.com/subfinder/subfinder@latest
* arjun
* gixy
* https://github.com/FloeDesignTechnologies/phpcs-security-audit.git
## Admin helpers
Query to convert platform URL's to fuzzable endpoint urls
```sql
select regexp_replace(source,'(<(.)+>)','FUZZ') from url_route;
```