Search the Community

very advanced (web) fuzzer [hide][Hidden Content]]

Powerful web directory fuzzer to locate existing and/or hidden files or directories. Similar to dirb or gobuster, but with a lot of mutation options. Features Proxy support Cookie support Basic Auth Digest Auth Retries (for slow servers) Persistent and non-persistent HTTP connection Request methods: GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS Custom HTTP header Mutate POST, PUT and PATCH payloads Mutate with different request methods Mutate with different HTTP headers Mutate with different file extensions Mutate with and without trailing slashes Enumerate GET parameter values [hide][Hidden Content]]

SSRF are often used to leverage actions on other services, this framework aims to find and exploit these services easily. SSRFmap takes a Burp request file as input and a parameter to fuzz. [HIDE][Hidden Content]]