From 2e42ece5bc13f73deeb15db1f13fab133a37db77 Mon Sep 17 00:00:00 2001 From: gorums Date: Wed, 22 Jan 2020 23:24:30 -0500 Subject: [PATCH] Add ffuf --- Ffuf/README.md | 37 +++++++++++++++++++++++++++++++++++++ Ffuf/Script | 21 +++++++++++++++++++++ 2 files changed, 58 insertions(+) create mode 100644 Ffuf/README.md create mode 100644 Ffuf/Script diff --git a/Ffuf/README.md b/Ffuf/README.md new file mode 100644 index 0000000..3db7504 --- /dev/null +++ b/Ffuf/README.md @@ -0,0 +1,37 @@ +## Ffuf Command + +Using {{domain}} ReconNess replace {{domain}} to the root domain, for example, yahoo.com if we define that as a root domain adding the Target + +If we have the wordlist in ~/Desktop/tools/wordlist/directories.txt + +``` +ffuf -w ~/Desktop/tools/wordlist/directories.txt -u https://{{domain}}/FUZZ +``` + +## Ffuf Script + +Check [Script file](https://github.com/reconness/reconness-agents/blob/master/Ffuf/Script) + +## Ffuf Dockerfile Entry + +``` +# -------- Agents dependencies -------- + +# To allow run ffuf inside the docker +RUN apt-get update && apt-get install -y wget && apt-get install -y git +RUN wget https://dl.google.com/go/go1.13.4.linux-amd64.tar.gz +RUN tar -C /usr/local -xzf go1.13.4.linux-amd64.tar.gz +RUN echo 'export GOROOT=/usr/local/go' >> ~/.profile +RUN echo 'export GOPATH=$HOME/go' >> ~/.profile +RUN echo 'export PATH=$GOPATH/bin:$GOROOT/bin:$PATH' >> ~/.profile +RUN . ~/.profile && go get github.com/ffuf/ffuf +RUN wget https://raw.githubusercontent.com/maurosoria/dirsearch/master/db/dicc.txt + +# -------- End Agents dependencies -------- +``` + +## Ffuf Command for Docker + +``` +cd /root/go/bin/ && ./ffuf -w /app/dicc.txt -u https://{{domain}}/FUZZ +``` diff --git a/Ffuf/Script b/Ffuf/Script new file mode 100644 index 0000000..e94c3d0 --- /dev/null +++ b/Ffuf/Script @@ -0,0 +1,21 @@ +using ReconNess.Core.Models; + +if (lineInputCount < 20) +{ + return new ScriptOutput(); +} + +lineInput = lineInput.Replace("",""); +var match = System.Text.RegularExpressions.Regex.Match(lineInput, @"(.*?)\[Status: (.*?), Size: (.*?),"); +if (match.Success && match.Groups.Count == 4) +{ + return new ScriptOutput + { + HttpDirectory = match.Groups[1].Value, + HttpDirectoryMethod = "GET", + HttpDirectoryStatusCode = match.Groups[2].Value, + HttpDirectorySize = match.Groups[3].Value, + }; +} + +return new ScriptOutput();