From b86ac262f3d2d87ad70c6b5b8ab87858fe29414f Mon Sep 17 00:00:00 2001 From: Joona Hoikkala Date: Mon, 12 Nov 2018 23:24:37 +0200 Subject: [PATCH] Doc fixes --- README.md | 15 +++++++++++---- main.go | 4 ++-- 2 files changed, 13 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 6a84cf9..e3fa860 100644 --- a/README.md +++ b/README.md @@ -72,8 +72,8 @@ To define the test case for ffuf, use the keyword `FUZZ` anywhere in the URL (`- ``` Usage of ./ffuf: - -H value - Header name and value, separated by colon. Multiple -H flags are accepted. + -H "Name: Value" + Header "Name: Value", separated by colon. Multiple -H flags are accepted. -X string HTTP method to use. (default "GET") -c Colorize output. @@ -81,16 +81,24 @@ Usage of ./ffuf: POST data. -fc string Filter HTTP status codes from response + -fr string + Filter regexp -fs string Filter HTTP response size + -fw string + Filter by amount of words in response -k Skip TLS identity verification (insecure) -mc string Match HTTP status codes from respose (default "200,204,301,302,307,401") + -mr string + Match regexp -ms string Match HTTP response size + -mw string + Match amount of words in response -s Do not print additional information (silent mode) -t int - Number of concurrent threads. (default 20) + Number of concurrent threads. (default 40) -u string Target URL -w string @@ -106,7 +114,6 @@ eg. `ffuf -u https://example.org/FUZZ -w /path/to/wordlist` ## TODO - Tests! - - Filters: word count, regex - Option to follow redirects - Optional scope for redirects - Client / server architecture to queue jobs and fetch the results later diff --git a/main.go b/main.go index 2e6ba3b..a73c4f1 100644 --- a/main.go +++ b/main.go @@ -44,7 +44,7 @@ func main() { defer cancel() conf := ffuf.NewConfig(ctx) opts := cliOptions{} - flag.Var(&opts.headers, "H", "Header name and value, separated by colon. Multiple -H flags are accepted.") + flag.Var(&opts.headers, "H", "Header `\"Name: Value\"`, separated by colon. Multiple -H flags are accepted.") flag.StringVar(&conf.Url, "u", "", "Target URL") flag.StringVar(&conf.Wordlist, "w", "", "Wordlist path") flag.BoolVar(&conf.TLSSkipVerify, "k", false, "Skip TLS identity verification (insecure)") @@ -143,7 +143,7 @@ func prepareConfig(parseOpts *cliOptions, conf *ffuf.Config) error { } if !foundkeyword { - errlist = multierror.Append(errlist, fmt.Errorf("No FUZZ keywords found in headers or URL, nothing to do")) + errlist = multierror.Append(errlist, fmt.Errorf("No FUZZ keyword(s) found in headers, URL or POST data, nothing to do")) } return errlist.ErrorOrNil() }