CmdID

CmdID / Commands

wfuzz

A web application bruteforcer. tldr-pages

On several platforms 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Brute force directories and files using the specified wordlist and also proxy the traffic

wfuzz -w path/to/file -p 127.0.0.1:8080:HTTP http://example.com/FUZZIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Save the results to a file

wfuzz -w path/to/file -f filename http://example.com/FUZZIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Show colorized output while only showing the declared response codes in the output

wfuzz -c -w path/to/file --sc 200,301,302 http://example.com/FUZZIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Use a custom Header to fuzz subdomains while hiding specific response codes and word counts. Increase the threads to 100 and include the target ip/domain

wfuzz -w path/to/file -H "Host: FUZZ.example.com" --hc 301 --hw 222 -t 100 example.comIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Brute force Basic Authentication using a list of usernames and passwords from files for each FUZz keyword, hiding response codes of unsuccessful attempts

wfuzz -c --hc 401 -s delay_between_requests_in_seconds -z file,path/to/usernames -z file,path/to/passwords --basic 'FUZZ:FUZ2Z' https://example.comIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Provide wordlist directly from the command-line and use POST request for fuzzing

wfuzz -z list,word1-word2-... https://api.example.com -d "id=FUZZ&showwallet=true"Identify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Provide wordlists from a file applying Base64 and MD5 encoding on them (wfuzz -e encoders lists all available encoders)

wfuzz -z file,path/to/file,none-base64-md5 https://example.com/FUZZIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

List available encoders/payloads/iterators/printers/scripts

wfuzz -e encodersIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

What detects it

Sigma process creation rules that name wfuzz
highLinux HackTool ExecutionNasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])