My favorites | Sign in
Logo
                
Search
for
Updated May 21, 2009 by fmavituna
Labels: Phase-Support, Featured
Samples  
Sample fsf runs

I have to agree that it's not that freakin' easy. It gets complicated but that's the life for you.

Simple Integer Based Fuzzing

From 1 to 100. Saves RegEx capture "." output to "c:\out\out.txt". It won't show HTTP Status code 200.

fsf.exe -u "http://www.example.com/SQLInjection-Numeric/?p=[FUZZ]" -m integer -o 1-100 --capture-output "C:\out\out.txt" -c .* -h 200

Data Scraping

This scrapes all projects with a "php" tag in google code and will save them in the c:\out\gc.txt

fsf.exe -u "http://code.google.com/hosting/search?q=php&filter=1&start=[FUZZ]" -m integer -o 0-3000-10, --capture-output "C:\out\gc.txt" -c "href=./p/([^/]*)/." --capture-group 1 --capture-template "{1}" --match-template "{0}{1}" -t 10

Sign in to add a comment
Hosted by Google Code