FFUF and EyeWitness – speeding up the search process

The situation is as follows — the FFUF has found several dozen/several hundred "hidden" resources. You can manually copy addresses to your browser to check each one for interesting results or automate the whole process a bit. I recommend this second approach and i will add a ready-made script, which part of the work will do for us.

  1. The first step to creating a useful single liner is to use the "verbose" mode in FFUFie. It will return the results to us along with a full link to the resource:
./ffuf -w /dictionary.txt -u https://juice-shop.herokuapp.com/FUZZ -v
ffuf verbose mode

2. In turn, we will use the command "grep", which will extract only those lines that contain the url:

./ffuf -w /usr/share/wordlists/dirb/small.txt -u https://juice-shop.herokuapp.com/FUZZ -v -fl 34|grep '| URL |'
ffuf grep

3. The next step is to extract the url itself from the results you received by using the "awk" command:

./ffuf -w /usr/share/wordlists/dirb/small.txt -u https://juice-shop.herokuapp.com/FUZZ -v -fl 34|grep '| | URL | awk -F '|' '{ print $3 }'
ffuf awk

4. Now the results obtained should be redirected to the file and use the program "eyewitness". He will visit for us each of the found resources and save a "screenshot" of what he looks like. Thus, we will only be left to review the received images in order to find interesting information:

ffuf grep awk eyewitness

The finished oneliner is as follows:

./ffuf -w /usr/share/wordlists/dirb/small.txt -u https://juice-shop.herokuapp.com/FUZZ -v -fl 34|grep '| | URL | awk -F '|' '{ print $3 }' >> urls.txt && eyewitness -f urls.txt -d screenshots

Chcesz wiedzieć więcej?

Zapisz się i bądź informowany o nowych postach.

Nigdy nie podam, nie wymienię ani nie sprzedam Twojego adresu e-mail. W każdej chwili możesz zrezygnować z subskrypcji.

Bookmark the permalink.

Podziel się swoją opinią na temat artykułu