Package: py3webfuzz
Py3webFuzz';-- Python  Web Fuzzing module LibraryPython3 Module CompatibleAuthorJonathan Angeles @ex0dayGithub:https://github.com/jangelesg/py3webfuzzContributorsNathan Hamiel @nathanhamielDESCRIPTIONBased on pywebfuzz, Py3webfuzz is a Python3 module to assist in the identification of vulnerabilities in web applications,
Web Services through brute force, fuzzing and analysis. The module does this by providing common testing values, generators and other
utilities that would be helpful when fuzzing web applications, API endpoints and developing web exploits.py3webfuzz has the fuzzdb and some other miscellaneous sources implemented in Python classes, methods and functions for
ease of use. fuzzdb project is just a collection of values for testing. The point is to provide a pretty good selection
of values from fuzzdb project and some others sources, cleaned up and available through Python3 classes, methods and namespaces.
This makes it easier and handy when the time comes up to use these values in your own exploits and PoC.Effort was made to match the names up similarly to the folders and values from the latest fuzzdb project. This effort can
sometimes make for some ugly looking namespaces. This balance was struck so that familiarity with the fuzzdb project
would cross over into the Python code. The exceptions come in with the replacement of hyphens with underscores.INSTALLATIONInstallation can be done in a couple of ways. If you want use virtual environmentOption 1Using pip$sudoapt-getinstallpython3-venvCreate a folder for your "venv", go to the directory and execute the following command$python3-mvenvvenvUpgrade, Activate PIP and Install$python3-mpipinstall--upgradepip$sourcevenv/bin/activate$pip3installpy3webfuzzYou should be able to go.Option 2Using Python setuptoolshttp://pypi.python.org/pypi/setuptoolsYou can run the supplied setup.py with the install command$setup.pyinstallYou can also use easy_install if that's what you do to manage your installed packages$easy_installpy3webfuzz_VERSION.tar.gzYou can also point to the location where the tar.gz lives on the web$easy_installURL_packageUploading this module to the Python Package Index. At that point you should be able to just type$easy_installpy3webfuzzUse in your CodeSome test cases can be found within info sub folder#AccessingSQLivaluesandencodethemforfurtheruse#ImportLibraryfrom py3webfuzz import fuzzdbfrom py3webfuzz import utils, encoderFuncs#InstantiateaClassObjectthatgiveyouaccesstoasetofSQLivaluessqli_detect_payload = fuzzdb.Attack.AttackPayloads.SQLi.Detect()#GettingAccesstothosevaluesthroughalistfor index, payload in enumerate(sqli_detect_payload.Generic_SQLI):print(f"Payload: {index} Value: {payload}")#UsingencoderFuncsyoucangetdifferenthandyencodingstodevelopexploitsprint(f"SQLi Char Encode: {encoderFuncs.sqlchar_encode(payload)}")#SendHTTPrequesttoyourtarget#ImportLibraryfrom py3webfuzz import utils#CustomeyourtargetandHeaderslocation = "http://127.0.0.1:8080/WebGoat/start.mvc#lesson/WebGoatIntroduction.lesson"headers = {"Host": "ssl.scroogle.org", "User-Agent": \"Mozilla/4.0 (compatible; MSIE 4.01; AOL 4.0; Mac_68K)","Content-Type": "application/x-www-form-urlencoded"}#atthispointyouhaveadicobjectwithalltheelementsforyourpentest#"headers":response.headers,"content":response.content,"status_code":response.status_code,#'json':response.json,"text":response.text,"time":f"Total in seconds: {time}"res = utils.make_request(location, headers=headers, method="get")#printtheresponseprint(res)DemoFUTUREUploading this module to the Python Package Index.Integrate features, classes , methods and values for Mobile PentestEnhance the XSS, XXE,  techniques throw some new features (Any ideas are welcome)Feature for Server-Side Template Injection