User-Agent and Referer Header SQLI Fuzzer
Project description
User-Agent , X-Forwarded-For and Referer SQLI Fuzzer made with python
Works on linux
and unix
based systems
Legal DisclaimerUsage of userefuzz for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program |
Installation
pip
sudo pip install userefuzz
setup
git clone https://github.com/root-tanishq/userefuzz
cd userefuzz
sudo python3 setup.py install
Usage
Parsing URLs
Parsing a list of URLs
$ userefuzz -l <LIST>
Parsing a URL
$ userefuzz -u <URL>
Parsing stdin URLs
$ <STDIN LIST> | userefuzz
Use
-v
switch for verbose(includes non-vuln detected URLs) output
Multi Processing
Multi Processing will create more process and will increase the speed of the tool.
$ userefuzz <LIST / URL> -w <WORKER COUNT>
Proxy Interception And Custom Injection
Proxy interception of vulnerable request
$ userefuzz <LIST/URL> -p <PROXY>
Custom message in request
$ userefuzz <LIST/URL> -m <MESSAGE>
Custom payload with custom sleep
Replace
sleep time
with$UFZ$
variable for double verification of userefuzz
$ userefuzz <LIST/URL> -i <CUSTOM SQLI PAYLOAD> -s <SLEEP COUNT IN THE PAYLOAD>
Multi payload with custom sleep
Replace
sleep time
with$UFZ$
variable for double verification of userefuzz
$ userefuzz <LIST/URL> -i <SQLI PAYLOAD FILE> -s <SLEEP COUNT IN THE PAYLOAD>
Custom header injection
$ userefuzz <LIST/URL> -ch <CUSTOM HEADER NAME>
Multi header injection
For multiple headers use
|
as shown below.
$ userefuzz <LIST/URL> -ch <CUSTOM HEADER NAME|OTHER HEADERS>
Output
Markdown output
$ userefuzz <LIST/URL> -o <OUTPUT FILE NAME WITHOUT EXT>
Output file content
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
userefuzz-2.2.0.tar.gz
(7.1 kB
view hashes)
Built Distribution
Close
Hashes for userefuzz-2.2.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 2f472f096eafeb31b4a3e1fea34050088e0e4bb0d0e630fc2c2f462c98d6b7cd |
|
MD5 | e1edd7c4ca284b60b80fb251f03fb380 |
|
BLAKE2b-256 | 4c5ec86cd7e22b078972a0b33cd51d39da2ad01188725a2756b450a7f27667a5 |