Wfuzz is a tool designed for bruteforcing Web Applications, it can be used for finding resources not linked (directories, servlets, scripts, etc), bruteforce GET and POST parameters for checking different kind of injections (SQL, XSS, LDAP,etc), bruteforce Forms parameters (User/Password), Fuzzing,etc.
Highlights in this version:
[+] Infinite payloads. You can now define as many FUZnZ words as you need .
[+] Multiple encoders per payload. You can now define as many encoders as you need for each payload independently.
[+] Payload combination. You can now combine your payloads in different ways by specifying iterators.
[+] Increased flexibility. You can now define in an easy way new payloads,iterators,encoders and output handlers and they will be part of wfuzz straight away.
[+] Baseline support. You can now define a default value for each payload and compare the results against them.
Download Wfuzz v.2.0: http://code.google.com
0 comments:
Post a Comment