# Fuzzing

## WFuzz

`apt-get install -y wfuzz`

Fuzzing es una tecnica utilizada para buscar sobre la estructura de un sitio web, usualmente se utiliza el wordlist 2.3-medium

{% code fullWidth="true" %}

```bash
wfuzz -c -t 20 --hc=404 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt web.web/FUZZ
```

{% endcode %}

Puedes agregaarYou can add the parameter `-f {FileName}` to save it somewhere.

## GoBuster

Otra herramienta que se puede utilizar para fuzzing

{% code fullWidth="true" %}

```bash
gobuster dir -u http://{Target}/ -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -t 20
```

{% endcode %}

Tambien puedes probar con extensiones especificas

{% code fullWidth="true" %}

```bash
gobuster dir -u http://[Target]/ -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -t 20 -x php
```

{% endcode %}

### Wordlists

> Webfuzz

* /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt

> For APIs

* [/usr/share/wordlists/api.txt](https://gist.github.com/helcaraxeals/7c45201b1c957ecea82ef7800da4bfa4)

#### Fixing Wfuzz

```bash
sudo apt --purge remove python3-pycurl
sudo apt install libcurl4-openssl-dev libssl-dev
sudo pip3 install pycurl wfuzz
apt-get install -y wfuzz
```


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://robertos-notebook.gitbook.io/vuldarconcept/enumeration/fuzzing.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.