it doesn't work well with two parameters [post]
Open
question
- Dominant language
- Go
- Stars
- 16.7k
- Forks
- 1.6k
- Avg merge
- 9m
- Merged PRs (30d)
- 4
Description
"ffuf -fs=683 -w userzy:PAR1 -w /usr/share/seclists/Discovery/Web-Content/common.txt:PAR2 -d 'user=PAR1&pass=PAR2' -u http://172.16.1.117/index.php" - works bad, even if i change to "ffuf -fs=683 -w userzy:PAR1 -w /usr/share/seclists/Discovery/Web-Content/common.txt:PAR2 -d 'user=PAR1\&pass=PAR2' -u http://172.16.1.117/index.php"
but wfuzz works perfect with 2 parameters...
wfuzz -w /usr/share/seclists/Passwords/Common-Credentials/10-million-password-list-top-1000.txt -d 'user=kevin&pass=FUZZ' -u http://172.16.1.117/index.php --hs 'invalid'
I used ffuf for a long time, but after it failed to check login with two parameters, I went back to wfuzz.
Can You correct ffuf?
Contributor guide
Assessment
This issue has not been assessed yet.