Fuzzing

Fuzzing for API

Fuzzing for DIR/Files

Fuzzing for UID,Guid, Id

Tools: Dirbuster, wfuzz, ffuf

ffuf -c -ac -u https://cobalt.ctfio.com/FUZZ -w content.txt -recursion

-e extenstion: log,txt

ffuf -c -ac -u https://cobalt.ctfio.com/log/FUZZ.log -w dates.txt -ac -mc 200

cat routes.txt

cat routes.txt | cut -d "" -f 1 | awk '{print "https://malachite.ctfio.com/log/"$0".log"}'

make your own list for fuzzing: seclist