4 ms·
What is this fuzzing tool you use to get the endpoints?
by polishdude20 6y ago
What is this fuzzing tool you use to get the endpoints?
- tptacek 6y agoIt's sort of implied that it's not Burp Intruder, but Burp Intruder would be a pretty normal way to do this.
- deleted 6y ago[deleted]
- mrleiter 6y agoIt's actually Burpsuite, you can tell from the screenshot he provided.
- tptacek 6y agoHe's using Burp Suite for things, but writes about "fuzzing" for directories as if he's not using Burp for that (the plural on "tools" sort of suggests he's using something like dirbuster).
- OminousWeapons 6y agoDirbuster, gobuster, or some variant is probably what was used here.
- LeCow 6y agoBrute forcing is not fuzzing, neither of those are fuzzing tools
- polishdude20 6y agoYeah that's what I thought. Fuzzing doesn't discover API endpoints