ihebski / angryfuzzer Goto Github PK

Tools for information gathering

Python 0.70% HTML 54.13% C 0.20% ColdFusion 1.24% Java 13.14% Shell 1.37% PHP 15.19% Perl 2.24% Classic ASP 10.80% ASP.NET 0.99%

angryfuzzer's Introduction

AngryFuzz3r

Status: Development

About the AngryFuzz3r project

AngryFuzz3r is a collection of tools for pentesting to gather information and discover vulnerabilities of the targets based on Fuzzedb https://github.com/fuzzdb-project/fuzzdb project

UrlFuzz3r->AngryFuzz3r_1

Discover hidden files and directories on a web server. The application tries to find url relative paths of the given website by comparing them with a given set .

Features

Fuzz url set from an input file
Concurrent relative path search
Configurable number of fuzzing workers
Fuzz CMS ==> Wordpress,Durpal,Joomla
Generate reports of the valid paths

Usage

$ python angryFuzzer.py -h
Usage: angryFuzzer.py [options]

Options:
  -h, --help            show this help message and exit
  -q, --quiet           Silent mode ,only reports
  -u URL, --url=URL      URL of the Target
  -c CMS, --cms=CMS     scan CMS ==> wp ,dp
  -w WORDLIST, --wordlist=WORDLIST
                        Custom wordlist

Example:

Fuzzing an url with default dictionary

python angryFuzzer.py -u http://127.0.0.1

Fuzzing CMS (wp: in this exemple !)

python angryFuzzer.py -u http://127.0.0.1 --cms wp

Fuzzing a custom Wordlist

python angryFuzzer.py -u http://127.0.0.1 -w fuzzdb/discovery/predictable-filepaths/php/PHP.txt

How to install

Clone

Clone the repository with:

$ git clone https://github.com/ihebski/angryFuzzer.git
$ cd angryFuzzer
$ python angryFuzzer.py

Dependencies

Install the required dependencies with:

$ sudo pip install -r requirements.txt

License

The MIT License (MIT)

angryfuzzer's People

Contributors

Stargazers

Watchers

Forkers

cys3c y0d4a 00derp jack51706 fuuddanni burtay infosecsecurity songofhack team-firebugs weeshlow 5-digits tobey123 ksmaheshkumar valerian38 doct0rx janddda c0axial shwwee shizzz477 hbxc0re orinocoz scorpioni4e a110605 ismailbozkurt crypt0b0y davedacoda mehrdad-shokri teambugsbunny antichown mgcfish imertayak dainerx 0n5 orcteam ziednamouchi umarkhan29 prodject armincxh azmi155 ma5onic avestra abutechorg raymondseger secice 8l4nk rahulyhg strunz983 w0lf3y mfrigillana bitbayio orf53975 adampaplaskas royrogers midoxnet l9sk techdossier 0x6b7966 rafi693 luongphuhoa blockchainguard cybersealops ibrahimcheik belalabdelwahab taidgh 5l1v3r1 dropnuke tietan666 yalonso7 vrphantom feguli nusaibsqli gituu4567 nathan38676 ktzgraph scp-id dznet p0llock ktm2590 codedx-cyber alexyigidey8 sumanthyadav9 cryptoxss netishter22 casparstools jgoodacre93 kheyedey mirzasohan a-abdellatif98 emadyay sleepergithub dalaho-bangin aimpxssible niral5855 josuerushanika dungalamahesh deejoft pegasus-01 sumitx01

angryfuzzer's Issues

Failed to run /Solved

hello,

Is there any requirement for using angryFuzzer ?
I ran this and got an error
[!] No module named request
Traceback (most recent call last):
File "./angryFuzzer.py", line 29, in
sys.exit(0)
NameError: name 'sys' is not defined

Which version of python to use ?

Not working in Termux

fix and make angryfuzzer for termux (No-Root)
thanks

pip install error

Collecting optparse (from -r requirements.txt (line 2))
Could not find a version that satisfies the requirement optparse (from -r requirements.txt (line 2)) (from versions: )
No matching distribution found for optparse (from -r requirements.txt (line 2))

Adding new file types

angryFuzzer doesn't look for .aspx files. How can we add new extensions for fuzzing.

angryfuzzer stops after 4 requests

As titles says, the tool stops just after 4 requests, regardless of which site I use:

python angryFuzzer.py -u http://192.168.174.131

/ _ \ ____ ___________ .._ / _ _
/ /\ \ / \ / _ __ < | | | )| | _ /_ / ( < __ "
/ | \ | / // > | /_ | | \ | | // / / / / \ | /
_| /| /__ /|| / | _ / |__//___ /_____ /______ /|
/ //___/ / / / / /

============>https://github.com/ihebski/angryFuzzer
===========================================> by Sold1er

[+] [11:55:42] - [404] - [/!.gitignore/] -> http://192.168.174.131/!.gitignore/
[+] [11:55:42] - [404] - [/!.htaccess/] -> http://192.168.174.131/!.htaccess/
[+] [11:55:42] - [404] - [/!.htpasswd/] -> http://192.168.174.131/!.htpasswd/
[+] [11:55:42] - [404] - [/%3f/] -> http://192.168.174.131/%3f/

Also the pip install fails as follow:

sudo pip install -r requirements.txt
Requirement already satisfied: requests in /usr/local/lib/python2.7/dist-packages/requests-2.5.0-py2.7.egg (from -r requirements.txt (line 1)) (2.5.0)
Collecting optparse (from -r requirements.txt (line 2))
Could not find a version that satisfies the requirement optparse (from -r requirements.txt (line 2)) (from versions: )
No matching distribution found for optparse (from -r requirements.txt (line 2))

Flagging the correct Directory as 404

Hi there .
I downloaded angryFuzzer the other day coz I needed it to solve a challenge .
I also got OWASP Dirbuster , the funny thing is ,I used same wordlist on both tools , but only dirbuster was able to find the hidden Directory , as for angryFuzzer it just marks it as 404 and move on .
I even copied about 9 out of 5m words and made a new Wordlist (the correct Directory was in there oc), loaded it into angryFuzzer , still skipped the correct Directory .

Here are the outputs from both Dirbuster and angryFuzzer
----angryFuzzer------

----Dirbuster------