Skip to content

Instantly share code, notes, and snippets.

@averagesecurityguy
Last active August 29, 2015 14:22
Show Gist options
  • Save averagesecurityguy/b4da588d7553803128b0 to your computer and use it in GitHub Desktop.
Save averagesecurityguy/b4da588d7553803128b0 to your computer and use it in GitHub Desktop.
Gobuster and Fuzzdb
#!/bin/sh
if [ "$#" -ne 1 ]; then
echo "Usage: bust.sh URL"
exit 1
fi
APPTEST_DIR="/Users/shaywood/apptest"
DISC="$APPTEST_DIR/fuzzdb/discovery/PredictableRes"
GB="$APPTEST_DIR/gobuster/gobuster -q -n -e -m dir"
CURL="curl -k -I -s --connect-timeout 3"
url=$1
reg=$(ls $DISC/*fuzz*)
cms=$(ls $DISC/CMS/*fuzz*)
all=( "${reg[@]}" "${cms[@]}" "$DISC/raft-large-files-lowercase.txt" "$DISC/raft-large-words-lowercase.txt")
# Run gobuster using all of the fuzz files.
function bust {
for file in $all
do
$GB -u $url -w $file
done;
}
echo "Fuzzing $url:"
resp=$($CURL $url)
if [ -z "$resp" ]
then
echo "Could not connect to $url."
else
bust
fi
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment