{"repo":"ariary/cfuzz","free":true,"listed":false,"github":"https://github.com/ariary/cfuzz","clone":"git clone https://github.com/ariary/cfuzz.git","description":"Command line fuzzer and bruteforcer 🌪 wfuzz for command","language":"Go","stars":95,"topics":["fuzzing","bruteforce","cli","security","pentest","bruteforcing","hacking"],"license":"Unlicense","category":"cli-tools","readme_excerpt":"cfuzz The same thing as wfuzz but for command line fuzzing. This enables to fuzz any command line execution and filter results. Also a good friend for bruteforcing { Install it ; Use it } Why? To perform fuzzing or bruteforcing we have plenty of awesome tools ( fuff and wfuzz for web fuzzing, hydra for network bruteforcing, to mention just a few). cfuzz is a tool that propose a different approach with a step-back. The aim is to be able to fuzz/bruteforce anything that can be transcribed in command line . Consequently, cfuzz can be seen either as an alternative of these tools for simple use case or an extension cause it handles a huge range of use cases Origins of the idea: when bruteforcing ipmi service to enumerate users. 3 options: use msfconsole , write module for hydra , manually or programmaticaly parse ipmitool tool output Demo user password bruteforcing :---: Install From release: With go: Usage Indicate: the command, with the fuzzing part determined with the keyword FUZZ the wordlist and let's get it! Or if you prefer in one line: Additionnaly it is possible to: Filter results Custom displayed field Configure cfuzz run Generate wordlists with AI Use cfuzz as an MCP server Filter results Additionaly, it is possible to filter displayed results: stdout filters: stderr filters: execution time filters: command exit code filters: To only display results that don't pass the filter use -H or --hide flag. cfuzz run configuration To make cfuzz more flexible and adapt to differe","default_branch":null,"files":null,"tree":[],"storefront":"/r/ariary","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ariary/cfuzz/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}