README
¶
fzcli
Scenario-based fuzzing test execution tool
Features
- Easy to customize fuzzing test for web applications
- Scripting fuzzing scenario in JavaScript / TypeScript
- Third-party packages can be used in scenario script
Install
Binary
Download binary from Releases page.
Linux (amd64)
$ curl -Lo fzcli.tar.gz https://github.com/shfz/fzcli/releases/download/v0.0.1/fzcli_0.0.1_linux_amd64.tar.gz
$ tar -zxvf fzcli.tar.gz
$ sudo mv fzcli /usr/local/bin/
$ sudo chmod +x /usr/local/bin/fzcli
Usage
This tool runs a scenario that calls http requests for the web application, with automatically embeds the fuzz in the request parameter (username, password, etc).
Please refer to shfz/fzlib-node for how to script scenarios.
fzcli run -t scenario.js -o /tmp/fzlog -p 10 -n 100
Options
- -t : Scenario script file
- -o : Log output location
- -p : Number of parallel executions of fuzzing
- -n : Number of total executions of fuzzing
Documentation
¶
Overview ¶
Copyright © 2021 NAME HERE <EMAIL ADDRESS>
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
Source Files
Directories