Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE REQUEST] - Option to unique results #635

Open
h121h opened this issue Aug 18, 2022 · 2 comments
Open

[FEATURE REQUEST] - Option to unique results #635

h121h opened this issue Aug 18, 2022 · 2 comments
Labels
enhancement New feature or request pinned

Comments

@h121h
Copy link

h121h commented Aug 18, 2022

If I am directory fuzzing or parameter fuzzing and every fuzz word that contains admin, for example, returns the exact same response. I only need to see 1 of these results. I'll only investigate 1 response because if they have the same status and size, they will almost certainly be the same exact 404 response, so I don't need to investigate every single result. Sure, I can filter these out, but I don't want to have to pause or restart to filter. I would just like to supply a unique option that way I still get the 404 response, but the results will only show 1 of them instead of 100+ with the exact same status code and size which just becomes noisy.

For example, the target may have a proxy or load balancer that says: If request contains admin, return a specific 301 or 404. So if I am fuzzing for admin panels and I supply the following words: admin, admins, administer, administrators, administrator - I will get the exact same response for all requests. It would be beneficial if I could provide a "--unique" flag which will filter out all subsequent request that contain the exact same response as a previous request.

@h121h h121h added the enhancement New feature or request label Aug 18, 2022
@stale
Copy link

stale bot commented Sep 4, 2022

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the stale label Sep 4, 2022
@epi052 epi052 added the pinned label Sep 4, 2022
@stale stale bot removed the stale label Sep 4, 2022
@epi052
Copy link
Owner

epi052 commented Sep 4, 2022

spaced on the reply; thanks for the suggestion!

the --filter-similar-to flag works similar to this, however, it expects you to point it at the page prior to scanning, there's no automation tooled around it.

i don't plan on prioritizing this over what I've got going on with feroxfuzz, but would happily accept a pull request!

pinning it for now, and thank you again!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request pinned
Projects
None yet
Development

No branches or pull requests

2 participants