这是indexloc提供的服务，不要输入任何密码
Skip to content

Pencode #717

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 3 commits into from
Sep 12, 2023
Merged

Pencode #717

merged 3 commits into from
Sep 12, 2023

Conversation

@joohoi
Copy link
Member

@joohoi joohoi commented Sep 12, 2023

Integrate the https://github.com/ffuf/pencode to ffuf as a library.

Users can encode/hash the input content using all the available options for pencode itself:

  b64encode         - Base64 encoder
  hexencode         - Hex string encoder
  jsonescape        - JSON escape
  unicodeencodeall  - Unicode escape string encode (all characters)
  urlencode         - URL encode reserved characters
  urlencodeall      - URL encode all characters
  utf16             - UTF-16 encoder (Little Endian)
  utf16be           - UTF-16 encoder (Big Endian)
  xmlescape         - XML escape
  b64decode         - Base64 decoder
  hexdecode         - Hex string decoder
  jsonunescape      - JSON unescape
  unicodedecode     - Unicode escape string decode
  urldecode         - URL decode
  xmlunescape       - XML unescape
  md5               - MD5 sum
  sha1              - SHA1 checksum
  sha224            - SHA224 checksum
  sha256            - SHA256 checksum
  sha384            - SHA384 checksum
  sha512            - SHA512 checksum
  lower             - Convert string to lowercase
  upper             - Convert string to uppercase

Example usage:

ffuf -w 'wordlist.txt' -w 'wordlist2.txt:ENCODEME' -u 'https://target.tld/FUZZ?key=ENCODEME' -enc 'ENCODEME:utf16 b64encode'

@joohoi joohoi merged commit ca2224c into master Sep 12, 2023
@adilsalim1
Copy link

adilsalim1 commented May 4, 2024

ffuf -H 'Content-Type: application/json' -X 'POST' -mode 'clusterbomb' -w users.txt:UFUZZ -w rockyou.txt:PFUZZ -enc 'PFUZZ:b64encode' -d '{"username": "UFUZZ","password": "PFUZZ"}' -u 'https://api.demoblaze.com/login' -x 'http://localhost:8080'
flag provided but not defined: -enc

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@joohoi @adilsalim1