Skip to content

Commit

Permalink
2023-07-04 08:41:39
Browse files Browse the repository at this point in the history
  • Loading branch information
PettterWang committed Jul 4, 2023
1 parent db90f61 commit adb12bb
Show file tree
Hide file tree
Showing 13 changed files with 105 additions and 24 deletions.
Binary file added README.assets/2.gif
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added README.assets/image-20230703165616837.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added README.assets/image-20230704082537776.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added README.assets/image-20230704083239526.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added README.assets/image-20230704083333084.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added README.assets/image-20230704083633454.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added README.assets/image-20230704083740819.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
30 changes: 29 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
@@ -1,2 +1,30 @@
# URLFUZZ
URLFUZZ By T00ls.Net
## 0x00 简介

- URLFUZZ 是一款辅助实现**url解析特性造成绕过访问控制**的工具,其能够快速生成用于未授权访问、BypassWAF等测试场景的Payload。

## 0x01 使用说明

- 界面:

![image-20230703165616837](README.assets/image-20230703165616837.png)

- 内置规则展示:

![image-20230704082537776](README.assets/image-20230704082537776.png)

- 自定义规则:勾选Custom Rule可以自定义一条规则

- 使用方法:

![image-20230704083239526](README.assets/image-20230704083239526.png)

- 示例:使用上述保存的字典对http://192.168.10.23/public/upload/files/111.jpg进行URLFUZZ。

![image-20230704083333084](README.assets/image-20230704083333084.png)

![image-20230704083633454](README.assets/image-20230704083633454.png)

![image-20230704083740819](README.assets/image-20230704083740819.png)

![2](README.assets/2.gif)
15 changes: 15 additions & 0 deletions URLFUZZ/App.config
Original file line number Diff line number Diff line change
@@ -1,6 +1,21 @@
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
<configSections>
<sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >
<section name="URLFUZZ.Properties.Settings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />
</sectionGroup>
</configSections>
<startup>
<supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.7.2" />
</startup>
<userSettings>
<URLFUZZ.Properties.Settings>
<setting name="URLFUZZ_URL" serializeAs="String">
<value />
</setting>
<setting name="URLFUZZ_CUSTOM" serializeAs="String">
<value />
</setting>
</URLFUZZ.Properties.Settings>
</userSettings>
</configuration>
1 change: 1 addition & 0 deletions URLFUZZ/Form1.Designer.cs

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

12 changes: 12 additions & 0 deletions URLFUZZ/Form1.cs
Original file line number Diff line number Diff line change
Expand Up @@ -334,5 +334,17 @@ private void listBox_URLFUZZ_Payload_MouseDoubleClick(object sender, MouseEventA
Clipboard.SetText(selectedItem);
}
}

private void Form1_Load(object sender, EventArgs e)
{
if (Properties.Settings.Default.URLFUZZ_URL != string.Empty)
{

}
if (Properties.Settings.Default.URLFUZZ_CUSTOM != string.Empty)
{

}
}
}
}
54 changes: 37 additions & 17 deletions URLFUZZ/Properties/Settings.Designer.cs

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

17 changes: 11 additions & 6 deletions URLFUZZ/Properties/Settings.settings
Original file line number Diff line number Diff line change
@@ -1,7 +1,12 @@
<?xml version='1.0' encoding='utf-8'?>
<SettingsFile xmlns="http://schemas.microsoft.com/VisualStudio/2004/01/settings" CurrentProfile="(Default)">
<Profiles>
<Profile Name="(Default)" />
</Profiles>
<Settings />
</SettingsFile>
<SettingsFile xmlns="http://schemas.microsoft.com/VisualStudio/2004/01/settings" CurrentProfile="(Default)" GeneratedClassNamespace="URLFUZZ.Properties" GeneratedClassName="Settings">
<Profiles />
<Settings>
<Setting Name="URLFUZZ_URL" Type="System.String" Scope="User">
<Value Profile="(Default)" />
</Setting>
<Setting Name="URLFUZZ_CUSTOM" Type="System.String" Scope="User">
<Value Profile="(Default)" />
</Setting>
</Settings>
</SettingsFile>

0 comments on commit adb12bb

Please sign in to comment.