htrgouvea
htrgouvea
It would be interesting if the fuzzer itself identified some of the technologies used by the application, consequently, taking the freedom to decide which wordlists to use. References: 1. https://github.com/iustin24/chameleon
Hi folks, During my use of [BBRF Plugin](https://github.com/honoki/bbrf-burp-plugin) i see one interessant feature that we can replicate to this extentions. After defining a project, we can automatically load the assets...
https://metacpan.org/pod/Nmap::Scanner
I believe that a module to identify parameters and possible injection points, along with testing different payloads and checking responses could help find XSS's and this would be very useful...