该工具中,-z选项如果使用hexrand模式,会出现死循环。建议将/usr/share/wfuzz/plugins/payloads.py
进行修改。将168行的代码替换修改如下:
def next (self):
if self.__count==0: #避免死循环
raise StopIteration
self.current = random.SystemRandom().randint(self.minimum,self.maximum)
lgth = len(hex(self.maximum).replace("0x",""))
pl="%"+str(lgth)+"s"
num = hex(self.current).replace("0x","")
pl = pl % (num)
payl =pl.replace(" ","0")
self.__count+=1 #执行计数加一
return payl |