foglar/ffuff
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix verifytls (#22)

Browse Source 
* Fix wording and make tls verify more intuitive

* Fix README.md
This commit is contained in:
Joona Hoikkala 2019-04-06 18:54:27 +03:00 committed by GitHub
parent 404e413d47
commit 950a9e8c8f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -86,7 +86,7 @@ To define the test case for ffuf, use the keyword `FUZZ` anywhere in the URL (`-
Filter HTTP response size Filter HTTP response size
-fw string -fw string
Filter by amount of words in response Filter by amount of words in response
-k Skip TLS identity verification (insecure) -k TLS identity verification
-mc string -mc string
Match HTTP status codes from respose (default "200,204,301,302,307,401,403") Match HTTP status codes from respose (default "200,204,301,302,307,401,403")
-mr string -mr string

2
main.go
View File

@ -52,7 +52,7 @@ func main() {
flag.Var(&opts.headers, "H", "Header `\"Name: Value\"`, separated by colon. Multiple -H flags are accepted.") flag.Var(&opts.headers, "H", "Header `\"Name: Value\"`, separated by colon. Multiple -H flags are accepted.")
flag.StringVar(&conf.Url, "u", "", "Target URL") flag.StringVar(&conf.Url, "u", "", "Target URL")
flag.StringVar(&conf.Wordlist, "w", "", "Wordlist path") flag.StringVar(&conf.Wordlist, "w", "", "Wordlist path")
flag.BoolVar(&conf.TLSSkipVerify, "k", true, "Skip TLS identity verification (insecure)") flag.BoolVar(&conf.TLSVerify, "k", false, "TLS identity verification")
flag.StringVar(&opts.delay, "p", "", "Seconds of `delay` between requests, or a range of random delay. For example \"0.1\" or \"0.1-2.0\"") flag.StringVar(&opts.delay, "p", "", "Seconds of `delay` between requests, or a range of random delay. For example \"0.1\" or \"0.1-2.0\"")
flag.StringVar(&opts.filterStatus, "fc", "", "Filter HTTP status codes from response") flag.StringVar(&opts.filterStatus, "fc", "", "Filter HTTP status codes from response")
flag.StringVar(&opts.filterSize, "fs", "", "Filter HTTP response size") flag.StringVar(&opts.filterSize, "fs", "", "Filter HTTP response size")

4
pkg/ffuf/config.go
View File

@ -20,7 +20,7 @@ type Config struct {
FuzzHeaders map[string]string FuzzHeaders map[string]string
Method string Method string
Url string Url string
TLSSkipVerify bool TLSVerify bool
Data string Data string
Quiet bool Quiet bool
Colors bool Colors bool
@ -47,7 +47,7 @@ func NewConfig(ctx context.Context) Config {
conf.FuzzHeaders = make(map[string]string) conf.FuzzHeaders = make(map[string]string)
conf.Method = "GET" conf.Method = "GET"
conf.Url = "" conf.Url = ""
conf.TLSSkipVerify = true conf.TLSVerify = false
conf.Data = "" conf.Data = ""
conf.Quiet = false conf.Quiet = false
conf.StopOn403 = false conf.StopOn403 = false

2
pkg/runner/simple.go
View File

@ -35,7 +35,7 @@ func NewSimpleRunner(conf *ffuf.Config) ffuf.RunnerProvider {
MaxIdleConnsPerHost: 500, MaxIdleConnsPerHost: 500,
MaxConnsPerHost: 500, MaxConnsPerHost: 500,
TLSClientConfig: &tls.Config{ TLSClientConfig: &tls.Config{
InsecureSkipVerify: conf.TLSSkipVerify, InsecureSkipVerify: !conf.TLSVerify,
}, },
}} }}