12.09.06
Webfuzz — A series of basically useless Python Scripts
So a while ago I wrote a few small scripts and I based them all off the same imported script. They're nothing special but I figure maybe someone, somewhere has a use for them... So I've done up a small readme (which I've included with the files) and I've put them into a package for everyone to enjoy (or laugh at
). So grab them, play with them and let me know what you think
Peace,
HT
From the Readme:
-------
headerfuzz.py: This script takes a host and a max string size
as it's two arguments. It then iterates through
various Methods and Headers... The data for each
header will grow until max string size is reached.
mimefuzz.py: This script takes two headers (Accept and
Content-Type) and iterates through them.
Various mime types are appended to these
fields. The only input for this script is
a host.
randheader.py: This script takes host, max string size, headers
per send, and max times to run as it's arguments.
Randon headers are paired together (to the
supplied max) and each is populated with a
string of characters (to max string size).
randmime.py: This script takes a host, a number of iterations,
and a max mimetype count. It loops through each
iteration, appending random mimetypes.
webfuzz.py: My original intent was that this could be used
to fingerprint devices which speak http. Certain
"allowed" values are populated for various
headers. This is iterated through.


steve said,
December 25, 2006 at 1:40 pm
Thanks from us newbies
PixelFactor.org said,
December 28, 2006 at 7:15 pm
very nice post!
.:Computer Defense:. » Fuzzing Tools said,
January 15, 2007 at 6:58 pm
[...] I’m going to add WebFuzz… my series of cheesy Python scripts for fuzzing HTTP (to a minor extent). [...]