ffuf icon indicating copy to clipboard operation
ffuf copied to clipboard

New CLI Option to Trim slash Prefixes in Wordlist

Open 3lpsy opened this issue 5 years ago • 2 comments

Description

This PR adds the option to automatically trim prefixes preceeding slashes from a wordlist. For example, if a wordlist contains:

/x.txt
profile
/admin

ffuf would make the following requests for ffuf -u http://acme.com/FUZZ -w lists.txt -sp:

/x.txt => http://acme.com/x.txt
profile => http://acme.com/profile
/admin => http://acme.com/admin

Rationale

Typically, I would say that the wordlist should be prepared for the tool and context where the wordlist will be used. However, I have found myself creating countless duplicates of wordlists with the appendix "somelist-noslash.txt". I thought this would be a nice quality of life addition and save people time when switching to fresh VMs without having to load/prep custom wordlists.

3lpsy avatar Feb 18 '21 18:02 3lpsy

Thanks for creating the PR.

I'm considering how to approach this. In the past I have been trying to avoid all features that can be handled "outside" of ffuf. I think this is important in order to avoid feature creep, and to be honest the amount of CLI flags available is making it harder to get a grasp of the tool and using it efficiently.

In my opinion, it would be a better fit for ffuf-scripts as a shell script (even though there's not much at the repo atm)

What do you think?

joohoi avatar Feb 21 '21 14:02 joohoi

I completely agree in keeping tools streamlined and this use case definitely does not fall under ffuf's domain so no worries there. It was just an experience I kept having moving from box to box. If it's an experience that many people are having, it might be worth making an exception, but for now, I'm okay with exploring external alternatives / leveraging bash i/o. Let me know what you think, but I'm fine letting the current PR fade into obscurity if there's no support for it.

3lpsy avatar Feb 22 '21 03:02 3lpsy