-
Notifications
You must be signed in to change notification settings - Fork 5
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
db90f61
commit adb12bb
Showing
13 changed files
with
105 additions
and
24 deletions.
There are no files selected for viewing
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,2 +1,30 @@ | ||
# URLFUZZ | ||
URLFUZZ By T00ls.Net | ||
## 0x00 简介 | ||
|
||
- URLFUZZ 是一款辅助实现**url解析特性造成绕过访问控制**的工具,其能够快速生成用于未授权访问、BypassWAF等测试场景的Payload。 | ||
|
||
## 0x01 使用说明 | ||
|
||
- 界面: | ||
|
||
![image-20230703165616837](README.assets/image-20230703165616837.png) | ||
|
||
- 内置规则展示: | ||
|
||
![image-20230704082537776](README.assets/image-20230704082537776.png) | ||
|
||
- 自定义规则:勾选Custom Rule可以自定义一条规则 | ||
|
||
- 使用方法: | ||
|
||
![image-20230704083239526](README.assets/image-20230704083239526.png) | ||
|
||
- 示例:使用上述保存的字典对http://192.168.10.23/public/upload/files/111.jpg进行URLFUZZ。 | ||
|
||
![image-20230704083333084](README.assets/image-20230704083333084.png) | ||
|
||
![image-20230704083633454](README.assets/image-20230704083633454.png) | ||
|
||
![image-20230704083740819](README.assets/image-20230704083740819.png) | ||
|
||
![2](README.assets/2.gif) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,6 +1,21 @@ | ||
<?xml version="1.0" encoding="utf-8" ?> | ||
<configuration> | ||
<configSections> | ||
<sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" > | ||
<section name="URLFUZZ.Properties.Settings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" /> | ||
</sectionGroup> | ||
</configSections> | ||
<startup> | ||
<supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.7.2" /> | ||
</startup> | ||
<userSettings> | ||
<URLFUZZ.Properties.Settings> | ||
<setting name="URLFUZZ_URL" serializeAs="String"> | ||
<value /> | ||
</setting> | ||
<setting name="URLFUZZ_CUSTOM" serializeAs="String"> | ||
<value /> | ||
</setting> | ||
</URLFUZZ.Properties.Settings> | ||
</userSettings> | ||
</configuration> |
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,7 +1,12 @@ | ||
<?xml version='1.0' encoding='utf-8'?> | ||
<SettingsFile xmlns="http://schemas.microsoft.com/VisualStudio/2004/01/settings" CurrentProfile="(Default)"> | ||
<Profiles> | ||
<Profile Name="(Default)" /> | ||
</Profiles> | ||
<Settings /> | ||
</SettingsFile> | ||
<SettingsFile xmlns="http://schemas.microsoft.com/VisualStudio/2004/01/settings" CurrentProfile="(Default)" GeneratedClassNamespace="URLFUZZ.Properties" GeneratedClassName="Settings"> | ||
<Profiles /> | ||
<Settings> | ||
<Setting Name="URLFUZZ_URL" Type="System.String" Scope="User"> | ||
<Value Profile="(Default)" /> | ||
</Setting> | ||
<Setting Name="URLFUZZ_CUSTOM" Type="System.String" Scope="User"> | ||
<Value Profile="(Default)" /> | ||
</Setting> | ||
</Settings> | ||
</SettingsFile> |