You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If I am directory fuzzing or parameter fuzzing and every fuzz word that contains admin, for example, returns the exact same response. I only need to see 1 of these results. I'll only investigate 1 response because if they have the same status and size, they will almost certainly be the same exact 404 response, so I don't need to investigate every single result. Sure, I can filter these out, but I don't want to have to pause or restart to filter. I would just like to supply a unique option that way I still get the 404 response, but the results will only show 1 of them instead of 100+ with the exact same status code and size which just becomes noisy.
For example, the target may have a proxy or load balancer that says: If request contains admin, return a specific 301 or 404. So if I am fuzzing for admin panels and I supply the following words: admin, admins, administer, administrators, administrator - I will get the exact same response for all requests. It would be beneficial if I could provide a "--unique" flag which will filter out all subsequent request that contain the exact same response as a previous request.
The text was updated successfully, but these errors were encountered:
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
the --filter-similar-to flag works similar to this, however, it expects you to point it at the page prior to scanning, there's no automation tooled around it.
i don't plan on prioritizing this over what I've got going on with feroxfuzz, but would happily accept a pull request!
If I am directory fuzzing or parameter fuzzing and every fuzz word that contains admin, for example, returns the exact same response. I only need to see 1 of these results. I'll only investigate 1 response because if they have the same status and size, they will almost certainly be the same exact 404 response, so I don't need to investigate every single result. Sure, I can filter these out, but I don't want to have to pause or restart to filter. I would just like to supply a unique option that way I still get the 404 response, but the results will only show 1 of them instead of 100+ with the exact same status code and size which just becomes noisy.
For example, the target may have a proxy or load balancer that says: If request contains admin, return a specific 301 or 404. So if I am fuzzing for admin panels and I supply the following words: admin, admins, administer, administrators, administrator - I will get the exact same response for all requests. It would be beneficial if I could provide a "--unique" flag which will filter out all subsequent request that contain the exact same response as a previous request.
The text was updated successfully, but these errors were encountered: