From 5c1a535fa94ba4197b97463bda0bb31aeca6b0ba Mon Sep 17 00:00:00 2001 From: JamTookTheBait <47693671+JamTookTheBait@users.noreply.github.com> Date: Sun, 8 Dec 2019 06:48:53 -0500 Subject: [PATCH] fixed POST data fuzzing example (#119) -u flag is required --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 09aecfa..5974af5 100644 --- a/README.md +++ b/README.md @@ -62,7 +62,7 @@ ffuf -w /path/to/values.txt -u https://target/script.php?valid_name=FUZZ -fc 401 This is a very straightforward operation, again by using the `FUZZ` keyword. This example is fuzzing only part of the POST request. We're again filtering out the 401 responses. ``` -ffuf -w /path/to/postdata.txt -X POST -d "username=admin\&password=FUZZ" https://target/login.php -fc 401 +ffuf -w /path/to/postdata.txt -X POST -d "username=admin\&password=FUZZ" -u https://target/login.php -fc 401 ``` ### Using external mutator to produce test cases