Skip to main content
Name:wfuzz
Category:Fuzzing
Publisher:trickest
Created:6/23/2021
Container:quay.io/trickest/wfuzz:3.1.0
Output Type:
License:Unknown

Parameters

​
field
string
--fieldDo not show the payload but only the specified language expression. Repeat for various fields.
​
cookie
string
-bSpecify a cookie for the requests. Repeat option for various cookies.
​
efield
string
--efieldShow the specified language expression together with the current payload. Repeat for various fields.
​
header
string
-HUse header (ex:Cookie:id=1312321&user=FUZZ). Repeat option for various headers.
​
recipe
string
--recipeReads options from a recipe. Repeat for various recipes.
​
ip-proxy
string
-pUse Proxy in format ip:port:type. Repeat option for using various proxies.
​
wordlist
file
required
-wSpecify a wordlist file (alias for -z file,wordlist).
​
ntlm-auth
string
--ntlmin format user:pass or FUZZ:FUZZ or domainFUZ2Z:FUZZ
​
post-data
string
-dUse post data (ex: id=FUZZ&catalogue=1)
​
scan-mode
boolean
-ZScan mode (Connection errors will be ignored)
​
basic-auth
string
--basicin format user:pass or FUZZ:FUZZ or domainFUZ2Z:FUZZ
​
digest-auth
string
--digestin format user:pass or FUZZ:FUZZ or domainFUZ2Z:FUZZ
​
dump-recipe
string
--dump-recipePrints current options as a recipe
​
http-method
string
-XSpecify an HTTP method for the request, ie. HEAD or FUZZ
​
script-scan
string
--scriptEquivalent to --script=default
​
color-output
boolean
-cOutput with colors
​
payload-args
string
--zPArguments for the specified payload (it must be preceded by -z or -w).
​
filter-payload
string
--sliceFilter payload's elements using the specified expression. It must be preceded by -z.
​
max-link-depth
string
-DMaximum link depth level.
​
no-http-request
boolean
--dry-runPrint the results of applying the requests without actually making any HTTP request.
​
payload-encoder
string
--zEEncoder for the specified payload (it must be preceded by -z or -w).
​
request-timeout
string
--req-delaySets the maximum time in seconds the request is allowed to take (CURLOPT_TIMEOUT). Default 90.
​
specify-payload
file
-zSpecify a payload for each FUZZ keyword used in the form of name[,parameter][,encoder].A list of encoders can be used, ie. md5-sha1. Encoders can be chained, ie. md5@sha1. Encoders category can be used. ie. url
​
url-for-request
string
required
Specify a URL for the request.
​
filter-responses
string
--filterShow/hide responses using the specified filter expression (Use BBB for taking values from baseline)
​
payload-iterator
string
-mSpecify an iterator for combining payloads
​
connection-timeout
string
--conn-delaySets the maximum time in seconds the connection phase to the server to take (CURLOPT_CONNECTTIMEOUT). Default 90.
​
hide-response-code
string
--hcHide responses with the specified code (Use BBB for taking values from baseline)
​
show-response-code
string
--scShow responses with the specified code (Use BBB for taking values from baseline)
​
hide-response-chars
string
--hhHide responses with the specified code/lines/words/chars (Use BBB for taking values from baseline)
​
hide-response-lines
string
--hlHide responses with the specified lines (Use BBB for taking values from baseline)
​
hide-response-words
string
--hwHide responses with the specified words (Use BBB for taking values from baseline)
​
max-recursion-level
string
-RRecursive path discovery being depth the maximum recursion level.
​
show-response-chars
string
--shShow responses with the specified chars (Use BBB for taking values from baseline)
​
show-response-lines
string
--slShow responses with the specified lines (Use BBB for taking values from baseline)
​
show-response-words
string
--swShow responses with the specified words (Use BBB for taking values from baseline)
​
concurent-connections
string
-tSpecify the number of concurrent connections (10 default)
​
disable-plugins-cache
boolean
--no-cacheDisable plugins cache. Every request will be scanned.
​
filter-before-fuzzing
string
--prefilterFilter items before fuzzing using the specified expression. Repeat for concatenating filters.
​
previous-http-request
boolean
--prevPrint the previous HTTP requests (only when using payloads generating fuzzresults)
​
all-params-bruteforcing
string
-VAll parameters bruteforcing (allvars and allpost). No need for FUZZ keyword.
​
provide-args-to-scripts
string
--script-argsProvide arguments to scripts. ie. --script-args grep.regex=<A href=(.*?)>
​
follow-http-redirections
string
-LFollow HTTP redirections
​
ip-and-port-to-connect-to
string
--ipSpecify an IP to connect to instead of the URL's host in the format ip:port
​
filter-items-before-fuzzing
string
--prefilterFilter items before fuzzing using the specified expression. Repeat for concatenating filters.
​
time-delay-between-requestts
string
-sSpecify time delay between requests