Basic HTTP fuzzer (w boofuzz)

booHTTP.py

from boofuzz import *
import sys

host = sys.argv[1]
port = int(sys.argv[2])

session = Session(target=Target(SocketConnection(host, int(port))))

s_initialize(name="request")
with s_block("verb"):
        s_group("Method", ["GET", "HEAD"])
        s_delim(" ", name="space1")
        s_static("FUZZ", size=-1)
        s_delim(" ", name="space2")
        s_string("HTTP")
        s_string("/", fuzzable=False)
        s_string("1.1")
        s_static("\r\n", name="Request-Line-CRLF")
s_static("\r\n", "Request-CRLF")

session.connect(s_get("request"))
session.fuzz()