GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
GooFuzz is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories without making requests to the web server.
Download and install:
Code:
$ git clone https://github.com/m3n0sd0n4ld/GooFuzz.git
$ cd GooFuzz
$ chmod +x GooFuzz
$ ./GooFuzz -hMenu
Code:
> ./GooFuzz -h
*********************************************************
* GooFuzz 1.2.2 - The Power of Google Dorks *
* *
* David Utón (@David_Uton) *
*********************************************************
Usage:
-h Display this help message.
-w <DICTIONARY> Specify a DICTIONARY, PATHS or FILES.
-e <EXTENSION> Specify comma-separated extensions.
-t <TARGET> Specify a DOMAIN or IP Address.
-p <PAGES> Specify the number of PAGES.
-x <EXCLUSIONS> EXCLUDES targets in searches.
-d <DELAY> Delay in seconds between requests.
-s Lists subdomains of the specified domain.
-c <TEXT> Specify relevant content in comma-separated files.
-o <FILENAME> Export the results to a file (results only).
-r <PROXY> Specify an [protocol://]host[:port] proxy.
Examples:
GooFuzz -t site.com -e pdf,doc,bak
GooFuzz -t site.com -e pdf -p 2
GooFuzz -t www.site.com -e extensionslist.txt
GooFuzz -t www.site.com -w config.php,admin,/images/
GooFuzz -t site.com -w wp-admin -p 1
GooFuzz -t site.com -w wordlist.txt
GooFuzz -t site.com -w login.html -x dev.site.com
GooFuzz -t site.com -w admin.html -x exclusion_list.txt
GooFuzz -t site.com -s -p 10 -d 5 -o GooFuzz-subdomains.txt
GooFuzz -t site.com -c P@ssw0rd!
GooFuzz -t site.com -r http://proxy.example.com:8080