find most response length is 1987
(kali㉿kali)-[~]
└─$ ffuf -w /usr/share/wordlists/dirb/common.txt -u http://localhost:3000/FUZZ
/'___\ /'___\ /'___\
/\ \__/ /\ \__/ __ __ /\ \__/
\ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\
\ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/
\ \_\ \ \_\ \ \____/ \ \_\
\/_/ \/_/ \/___/ \/_/
v1.3.1 Kali Exclusive <3
________________________________________________
:: Method : GET
:: URL : http://localhost:3000/#/FUZZ
:: Wordlist : FUZZ: /usr/share/wordlists/dirb/common.txt
:: Follow redirects : false
:: Calibration : false
:: Timeout : 10
:: Threads : 40
:: Matcher : Response status: 200,204,301,302,307,401,403,405
________________________________________________
_code [Status: 200, Size: 1987, Words: 207, Lines: 30]
[Status: 200, Size: 1987, Words: 207, Lines: 30]
.bash_history [Status: 200, Size: 1987, Words: 207, Lines: 30]
.bashrc [Status: 200, Size: 1987, Words: 207, Lines: 30]
.cache [Status: 200, Size: 1987, Words: 207, Lines: 30]
.config [Status: 200, Size: 1987, Words: 207, Lines: 30]
.cvs [Status: 200, Size: 1987, Words: 207, Lines: 30]
.listings [Status: 200, Size: 1987, Words: 207, Lines: 30]
.mysql_history [Status: 200, Size: 1987, Words: 207, Lines: 30]
.passwd [Status: 200, Size: 1987, Words: 207, Lines: 30]
.htpasswd [Status: 200, Size: 1987, Words: 207, Lines: 30]
.listing [Status: 200, Size: 1987, Words: 207, Lines: 30]
.perf [Status: 200, Size: 1987, Words: 207, Lines: 30]
.cvsignore [Status: 200, Size: 1987, Words: 207, Lines: 30]
.htaccess [Status: 200, Size: 1987, Words: 207, Lines: 30]
.profile [Status: 200, Size: 1987, Words: 207, Lines: 30]
.forward [Status: 200, Size: 1987, Words: 207, Lines: 30]
.history [Status: 200, Size: 1987, Words: 207, Lines: 30]
_cache [Status: 200, Size: 1987, Words: 207, Lines: 30]
.sh_history [Status: 200, Size: 1987, Words: 207, Lines: 30]
_catalogs [Status: 200, Size: 1987, Words: 207, Lines: 30]
.rhosts [Status: 200, Size: 1987, Words: 207, Lines: 30]
.ssh [Status: 200, Size: 1987, Words: 207, Lines: 30]
.svn/entries [Status: 200, Size: 1987, Words: 207, Lines: 30]
.svn [Status: 200, Size: 1987, Words: 207, Lines: 30]
_backup [Status: 200, Size: 1987, Words: 207, Lines: 30]
.swf [Status: 200, Size: 1987, Words: 207, Lines: 30]
_assets [Status: 200, Size: 1987, Words: 207, Lines: 30]
_baks [Status: 200, Size: 1987, Words: 207, Lines: 30]
_borders [Status: 200, Size: 1987, Words: 207, Lines: 30]
@ [Status: 200, Size: 1987, Words: 207, Lines: 30]
.git/HEAD [Status: 200, Size: 1987, Words: 207, Lines: 30]
.hta [Status: 200, Size: 1987, Words: 207, Lines: 30]
_archive [Status: 200, Size: 1987, Words: 207, Lines: 30]
.web [Status: 200, Size: 1987, Words: 207, Lines: 30]
_ [Status: 200, Size: 1987, Words: 207, Lines: 30]
_admin [Status: 200, Size: 1987, Words: 207, Lines: 30]
_ajax [Status: 200, Size: 1987, Words: 207, Lines: 30]
_adm [Status: 200, Size: 1987, Words: 207, Lines: 30]
.subversion [Status: 200, Size: 1987, Words: 207, Lines: 30]
_common [Status: 200, Size: 1987, Words: 207, Lines: 30]
_conf [Status: 200, Size: 1987, Words: 207, Lines: 30]
_config [Status: 200, Size: 1987, Words: 207, Lines: 30]
_css [Status: 200, Size: 1987, Words: 207, Lines: 30]
_data [Status: 200, Size: 1987, Words: 207, Lines: 30]
_database [Status: 200, Size: 1987, Words: 207, Lines: 30]
_derived [Status: 200, Size: 1987, Words: 207, Lines: 30]
_dev [Status: 200, Size: 1987, Words: 207, Lines: 30]
_dummy [Status: 200, Size: 1987, Words: 207, Lines: 30]
_files [Status: 200, Size: 1987, Words: 207, Lines: 30]
_flash [Status: 200, Size: 1987, Words: 207, Lines: 30]
_fpclass [Status: 200, Size: 1987, Words: 207, Lines: 30]
_images [Status: 200, Size: 1987, Words: 207, Lines: 30]
_img [Status: 200, Size: 1987, Words: 207, Lines: 30]
_inc [Status: 200, Size: 1987, Words: 207, Lines: 30]
_include [Status: 200, Size: 1987, Words: 207, Lines: 30]
_includes [Status: 200, Size: 1987, Words: 207, Lines: 30]
_install [Status: 200, Size: 1987, Words: 207, Lines: 30]
filter out response with size other than 1987
┌──(kali㉿kali)-[~]
└─$ ffuf -w /usr/share/wordlists/dirb/common.txt -u http://localhost:3000/FUZZ -fs 1987
/'___\ /'___\ /'___\
/\ \__/ /\ \__/ __ __ /\ \__/
\ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\
\ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/
\ \_\ \ \_\ \ \____/ \ \_\
\/_/ \/_/ \/___/ \/_/
v1.3.1 Kali Exclusive <3
________________________________________________
:: Method : GET
:: URL : http://localhost:3000/FUZZ
:: Wordlist : FUZZ: /usr/share/wordlists/dirb/common.txt
:: Follow redirects : false
:: Calibration : false
:: Timeout : 10
:: Threads : 40
:: Matcher : Response status: 200,204,301,302,307,401,403,405
:: Filter : Response size: 1987
________________________________________________
assets [Status: 301, Size: 179, Words: 7, Lines: 11]
ftp [Status: 200, Size: 11072, Words: 1568, Lines: 357]
promotion [Status: 200, Size: 6586, Words: 560, Lines: 177]
robots.txt [Status: 200, Size: 28, Words: 3, Lines: 2]
snippets [Status: 200, Size: 683, Words: 1, Lines: 1]
video [Status: 200, Size: 10075518, Words: 0, Lines: 0]
Video [Status: 200, Size: 10075518, Words: 0, Lines: 0]
:: Progress: [4614/4614] :: Job [1/1] :: 140 req/sec :: Duration: [0:00:37] :: Errors: 0 ::
exposed sensitive directory http://localhost:3000/ftp
reference:
No comments:
Post a Comment