Skip to main content

User-Agent and Referer Header SQLI Fuzzer

Project description

UseReFuzz

User-Agent , X-Forwarded-For and Referer SQLI Fuzzer made with python
Works on linux, Windows and MacOS based systems

Installation


pip3 install userefuzz
git clone https://github.com/root_tanishq/userefuzz
cd userefuzz
python3 setup.py install

Usage


  • Parsing A List of URLS
userefuzz -l <URL LIST>

list

  • Setup proxy for vulnerable requests
userefuzz -l <URL LIST> -p 'http://127.1:8080'

proxy

burp_proxy

  • Custom Message

Custom messages can be send with header for ease of sorting requerts in burpsuite

userefuzz -l <URL LIST> -p 'http://127.1:8080' -m '<Custom Message Here>'

message

burp_message

  • Custom Payload Injection
userefuzz -l <URL LIST> -i '<CUSTOM SQLI PAYLOAD>' -s <SLEEP ACCORDING TO PAYLOAD>

inject

Follow

If this tool helped you or you like my work
![@root-tanishq](https://twitter.com/root_tanishq)

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

userefuzz-1.1.0.tar.gz (3.4 kB view hashes)

Uploaded Source

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page