-
Notifications
You must be signed in to change notification settings - Fork 15
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
refactor: update wordlists and configuration defaults #221
Conversation
- Updated the wordlist used in startScan.json from dicc.txt to fuzz-Bo0oM.txt for directory scanning commands. - Refactored the configuration in tasks.py to use default wordlist names and paths for Amass and FFUF, improving maintainability. - Modified definitions.py to define default wordlist names and paths for Amass and FFUF, centralizing configuration. - Adjusted default_scan_engines.yaml and default_yaml_config.yaml to remove file extensions from the dir_file_fuzz configuration and set the recursive level to 0. - Updated scanEngine.json configurations to reflect changes in wordlist names and recursive levels, aligning with the new defaults.
- Converted wordlist paths to string format using Path for compatibility. - Changed the default recursive level for FFUF from 2 to 0.
Reviewer's Guide by SourceryThis PR optimizes directory fuzzing performance by switching to a faster wordlist and reducing scan depth. The changes include updating the default wordlist from 'dicc.txt' to 'fuzz-Bo0oM.txt', setting recursive level to 0, and removing file extensions from the configuration to reduce server load and scan duration while maintaining effective discovery capabilities. Class diagram for updated configuration defaultsclassDiagram
class Configuration {
+String AMASS_DEFAULT_WORDLIST_NAME = "deepmagic.com-prefixes-top50000"
+String AMASS_DEFAULT_WORDLIST_PATH = "Path(RENGINE_WORDLISTS)"
+String FFUF_DEFAULT_WORDLIST_NAME = "fuzz-Bo0oM"
+String FFUF_DEFAULT_WORDLIST_PATH = "Path(RENGINE_WORDLISTS)"
+List FFUF_DEFAULT_MATCH_HTTP_STATUS = [200, 204]
+int FFUF_DEFAULT_RECURSIVE_LEVEL = 0
+boolean FFUF_DEFAULT_FOLLOW_REDIRECT = false
}
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hey @psyray - I've reviewed your changes and they look great!
Here's what I looked at during the review
- 🟢 General issues: all looks good
- 🟢 Security: all looks good
- 🟢 Testing: all looks good
- 🟢 Complexity: all looks good
- 🟢 Documentation: all looks good
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.
- Added a commented list of file extensions to the default_yaml_config.yaml file for potential future use or reference.
As reported on the Discord, dir fuzzing is very long to run and generates heavy traffic on the targeted server when using default Full scan engine.
So I've changed the default dir dicc by fuzz-Bo0oM, more quick to run and which show a lot of quick findings, reduced the recursivity level to 0 and removed all the extensions.
Tested and working
Details here :
Summary by Sourcery
Update the default wordlist for directory scanning from dicc.txt to fuzz-Bo0oM.txt, reduce the recursive level to 0, and remove file extensions from the configuration. Refactor configuration files to use default wordlist names and paths for Amass and FFUF, enhancing maintainability and centralizing configuration.
Enhancements: