3 ms·

The HN submitter here. :) I happened across it this afternoon and thought it was great! Do you know of any automation around this? I was thinking of a script

The HN submitter here. :) I happened across it this afternoon and thought it was great! Do you know of any automation around this? I was thinking of a script that grabbed your list and then hammered a given input filtering library would be awesome. It's not something you'd want to run all the time but pre-major release, it could useful.

minimaxir 10y ago
That is the primary purpose of the JSON files and the parser to convert the .txt to JSON; get the list, run it against a text input field, see what happens.
- BuuQu9hu 10y ago
  Why do you store the generated JSON file in git btw?
  - lytedev 10y ago
    Not the maintainer, but I assume because it helps developers looking for it in such a format. Saving them the time of converting is a nice move, IMO.
    - BuuQu9hu 10y ago
      The source and build system are right there, should be easy to generate the other formats?
      - askmike 10y ago
        Now you can do copy and paste. I guess usability wise similar to offer precompiled packages of open source software (you can also build from source yourself, this is just a lot easier).
      - jaymzcampbell 10y ago
        Similar to the other comments, another voice here for appreciating the "pre-built" version being available for quick use. For repo's/sources like this I tend to think of the prebuilt formats as letting me play around with things without any hassle. Once I'm happy with it I'll invest the time to have it build locally for the control.
olivierlacan 10y ago
Yep, definitely going to make a little Ruby script that lists all Rails GET routes and tries to find submittable input fields. Basic starting point: Rails.application.routes.routes.collect { |route| route.path.spec.to_s if route.verb == "GET" }.compact
hoytech 10y ago
It's not automation around BLNS, but AFL has a bunch of sample dictionaries in the same vein: https://github.com/mirrorer/afl/tree/master/dictionaries https://github.com/mirrorer/afl/tree/master/dictionaries Might be interesting to make an AFL dictionary with BLNS strings, or mine the AFL dictionaries to improve BLNS... :)
ing33k 10y ago
Not a library suggestion, but you should be able to find a lot of Fuzzing Tools if you look around. Recently used Burp Suite's Intruder which can take a text file and do the Fuzzing.

minimaxir 10y ago

That is the primary purpose of the JSON files and the parser to convert the .txt to JSON; get the list, run it against a text input field, see what happens.

BuuQu9hu 10y ago
Why do you store the generated JSON file in git btw?
- lytedev 10y ago
  Not the maintainer, but I assume because it helps developers looking for it in such a format. Saving them the time of converting is a nice move, IMO.
  - BuuQu9hu 10y ago
    The source and build system are right there, should be easy to generate the other formats?
    - askmike 10y ago
      Now you can do copy and paste. I guess usability wise similar to offer precompiled packages of open source software (you can also build from source yourself, this is just a lot easier).
    - jaymzcampbell 10y ago
      Similar to the other comments, another voice here for appreciating the "pre-built" version being available for quick use. For repo's/sources like this I tend to think of the prebuilt formats as letting me play around with things without any hassle. Once I'm happy with it I'll invest the time to have it build locally for the control.

olivierlacan 10y ago

Yep, definitely going to make a little Ruby script that lists all Rails GET routes and tries to find submittable input fields. Basic starting point: Rails.application.routes.routes.collect { |route| route.path.spec.to_s if route.verb == "GET" }.compact

hoytech 10y ago

It's not automation around BLNS, but AFL has a bunch of sample dictionaries in the same vein: https://github.com/mirrorer/afl/tree/master/dictionaries https://github.com/mirrorer/afl/tree/master/dictionaries Might be interesting to make an AFL dictionary with BLNS strings, or mine the AFL dictionaries to improve BLNS... :)

ing33k 10y ago

Not a library suggestion, but you should be able to find a lot of Fuzzing Tools if you look around. Recently used Burp Suite's Intruder which can take a text file and do the Fuzzing.