commit dc6f9ade0bf523cbcfc99aceb1fada4e93500a30 Author: Graham Helton Date: Sat Oct 16 00:55:59 2021 -0400 Initial Commit diff --git a/README.md b/README.md new file mode 100644 index 0000000..66f124f --- /dev/null +++ b/README.md @@ -0,0 +1,6 @@ +# What is this? +Fuzzy box is a quick program I wrote to fuzz a URL that is in the format https:///20characterstring.. I have redacted the URL. + +# Example +A Quick demo of what this looks like once you fill out the `base` and `extension` variable +![](/fuzzybox.gif) diff --git a/fuzzybox.py b/fuzzybox.py new file mode 100755 index 0000000..d705bda --- /dev/null +++ b/fuzzybox.py @@ -0,0 +1,26 @@ +#!/bin/python3 +import random +import string +import requests +import time +startTime = time.time() + +base = "https://www.YourURLHere.com/" +extension = "File Extension (.jpg,.bak,.sh, etc)" +count = int(input("How many times do you want to run the loop? ")) +for i in range (count): + # get random string of letters and digits + source = string.ascii_letters + string.digits + result_str = ''.join((random.choice(source) for i in range(20))) + # Send request to FQDN + x = requests.get(base+result_str+extension) + url = base+result_str+extension + print(url) + statuscode = x.status_code + print(statuscode) + if str(statuscode) == "200": + f = open("hits.txt","a") + f.write("HIT: " + url + "\n") + f.close() +executionTime = (time.time() - startTime) +print('Execution time in seconds: ' + str(executionTime))