Light

d4rckh / vaf Goto Github PK

View Code? Open in Web Editor NEW

308.0 9.0 41.0 2.44 MB

Vaf is a cross-platform very advanced and fast web fuzzer written in nim

License: GNU General Public License v3.0

Nim 98.00% Shell 2.00%

bugbounty fuzzer web hacking nim vaf fuzzing penetration-testing pentest-tool xss

vaf's People

Stargazers

Watchers

Forkers

yalonso7 the-invincible sashka3076 y0d4a bbhunter slooppe daanbreur attacker-codeninja sec-js thinkingmalware optionalg j5s antichown laozhudetui kakawome net-hun73r polling-repo-continua thego0n rajivraj tmacbg h3llk4t3 bugbountydude rishavmehra xtenex lotfirb zykl0 chh4y ckevens attrib07 dutchcyberguy 0xsojalsec startagain2016 hxlxmjxbbxs 5l1v3r1 keralahacker nocomp nxg-7 joshuajohncohen noorahsmith gnusec

vaf's Issues

[Feature] Post data fuzzing.

Add ability to fuzz post data.

Will require a new parameter named x for choosing between GET and POST requests.
If x = POST then 2 new arguments can be used: postdata and contenttype.

[feature] configuration file

Creating a configuration file.
This will have a few settings which we can add more to later

[ ] wordlistspaths
[ ] defaultwordlist

[feature] progress bar

Progress bar showing useful information like: %, requests / second, how much the program has been running for. There's an example code on Nim docs: https://nim-lang.org/docs/terminal.html#progress-bar. We might need to make it so threads can report information back to the main thread

[feature] attribute based XSS

Actually the tool can only detect tag based xss payloads, for detecting attribute based xss, we need to analyse context where they payload is reflected.

May be you can add context analysis if required, to reduce false positives(only for attribute based xss).

This applies only for attribute based xss vulnerability .

[bug] bad coloring on windows

Describe the bug
Color codes are not working properly on cmd.exe

Expected behavior
Text should be properly colored on all platforms

Screenshots

Operating system (please complete the following information):

OS: Windows 10

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.