m4dh4v45b1n 0.2.3 → 0.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 66c7fd9e0e8065d936f755e3d6b92d131a6049cc5c10a094afc29761de0fd4a3
-  data.tar.gz: 06a0575b54682afcfe4ec7b0f56d5731151eab62eab76eaff283fd90b0e5f284
+  metadata.gz: 0e5d58ee3c04f3b84349c34ae8d7d307f87eed26a77b7f0407074fe7a144849d
+  data.tar.gz: e945d8aaea8f21a740c0694759885f86b410862231b3c9257e3634e0bbb9f3a8
 SHA512:
-  metadata.gz: 3c70ce3f1ee69c6a122166f1028642110181c26bd6f1ff7f51a8e247c060695695f6b203052d1e715af471f2706083ee3c6daae22dd69e75bbccd282f49ad6af
-  data.tar.gz: 9d6c29fff52dbf7b155b60876e1411f53a5b42fafe4cb958a26f622e73c13be5c1212614aad35027b734896cf80adb28d99736b53a9393ae95b8ca4b4acb0f4d
+  metadata.gz: d31b7b60d8040acbb4e8cc72c9ed2898a11143351672334cf1ee52b819ec38ea983ef7552239231460cd64c6ff0487b7a94545b86f07c36383e278eeeff71e2d
+  data.tar.gz: fc8bdeacb2856ce4896f2d5f03d60c3e6a5cf9670ee49ee87f4f6d05839b018e08bc659111818cc56ed99592a4ed50a6b5f2d0907a12aa24144358f75210c211

data/bin/fuzz-web-dir.rb

@@ -23,6 +23,9 @@ Eg: fuzz-web-dir.rb -e php,txt --hs 303,404  https://example.com
     optp.on('-e EXT', "Add extension.","Use comma for multiple value.", "(default:txt,php,html,xml") do |w|
       init.ext = w.split(',')
     end
+    optp.on('-E', "Dissable extension search.") do |e|
+      init.use_ext = false
+    end
     optp.on('-p INT', Float, 'Pause the fuzz for N second.') do |p|
       init.wait = p
     end

data/lib/m4dh4v45b1n/fuzz-web-dir.rb

@@ -14,7 +14,7 @@ def wordlist
 end
 FUZZ_WEB_DIR_DICT= wordlist
 FUZZ_WEB_DIR_HIDE_CODE=['404']
-FUZZ_WEB_DIR_EXT = ['php', 'txt', 'html', 'xml']
+FUZZ_WEB_DIR_EXT = ['php', 'txt', 'html', 'db']
 FUZZ_WEB_DIR_HEADER = '{}'
 FUZZ_WEB_DIR_TIMEOUT = 3    # SECONDS
 FUZZ_WEB_DIR_MAX_THREAD = 24
@@ -32,7 +32,7 @@ var.max_thread = 24
 var.ext = ['php','txt']
 =end
 class Fuzz_web_dir
-  attr_accessor :url,:dict,:hide_code,:hide_line,:hide_char,:show_code,:show_line,:show_char,:timeout,:max_thread,:ext,:out,:wait,:proxy,:decoy,:last_decoy, :pfile,:check,:header,:follow
+  attr_accessor :url,:dict,:hide_code,:hide_line,:hide_char,:show_code,:show_line,:show_char,:timeout,:max_thread,:ext,:out,:wait,:proxy,:decoy,:last_decoy, :pfile,:check,:header,:follow,:use_ext
   def initialize()
     @dict = FUZZ_WEB_DIR_DICT
     @hide_code = FUZZ_WEB_DIR_HIDE_CODE
@@ -49,6 +49,7 @@ class Fuzz_web_dir
     @decoy = false
     @check = true
     @follow = false
+    @use_ext = true
     @last_decoy = ''
     @pfile = FUZZ_WEB_DIR_PROXY_FILE
   end
@@ -179,8 +180,12 @@ class Fuzz_web_dir
     if @url[-1] != '/'
       @url += '/'
     end
-    @ext = @ext.map {|i| '.'+i }
-    @ext.append("")
+    if @use_ext
+      @ext = @ext.map {|i| '.'+i }
+      @ext.append("")
+    else
+      @ext = [""]
+    end
     @header = JSON::parse(@header)
     if @decoy
       @proxy = Pr0xy.new.get_proxies(@pfile,  @check)

data/lib/m4dh4v45b1n/version.rb

@@ -1,2 +1,2 @@
 # frozen_string_literal: true
-VERSION = "0.2.3"
+VERSION = "0.2.4"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: m4dh4v45b1n
 version: !ruby/object:Gem::Version
-  version: 0.2.3
+  version: 0.2.4
 platform: ruby
 authors:
 - Madhava-mng
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-07-30 00:00:00.000000000 Z
+date: 2021-08-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sdcd