.\" Generated by kramdown-man 0.1.8 .\" https://github.com/postmodern/kramdown-man#readme .TH ronin-fuzzer-fuzz 1 "2022-01-01" Ronin Fuzzer "User Manuals" .LP .SH SYNOPSIS .LP .HP \fBronin-fuzzer fuzz\fR \[lB]\fIoptions\fP\[rB] \[lB]\fITEMPLATE\fP\[rB] .LP .SH DESCRIPTION .LP .PP Fuzzes data read from a \fIFILE\fP or from \fBSTDIN\fR\. The fuzzed data can be written to output files, run in commands or sent to TCP\[sl]UDP services\. .LP .SH OPTIONS .LP .TP \fB-v\fR, \fB--[no-]verbose\fR Enable verbose output\. .LP .TP \fB-q\fR, \fB--[no-]quiet\fR Disable verbose output\. .LP .TP \fB--[no-]silent\fR Silence all output\. .LP .TP \fB-i\fR, \fB--input\fR \fIFILE\fP The input text FILE to parse\. Data will be read from \fBSTDIN\fR by default\. .LP .HP \fB-r\fR, \fB--rule\fR \[lB]\fIPATTERN\fP\[or]\fI\[sl]REGEXP\[sl]\fP\[or]STRING\[rB]:\[lB]\fIMETHOD\fP\[or]\fISTRING\fP\fI*N\fP\[lB]\-\fIM\fP\[rB]\[rB] The rule to apply to the \fIINPUT\fP\. Fuzzer rules consist of a pattern and substitution\. Patterns may be one of the following: .LP .nf * A name of a Ronin Regular Expression (ex: \`unix\[ru]path\`) * A custom Regular Expression (ex: \`\[sl]\ed\[pl]\[sl]\`) * A plain String (ex: \`example\.com\`)\. Substitutions may be one of the following: * A method from \`Ronin::Fuzzer\` (ex: \`bad\[ru]strings\`) * A *STRING*, repeated *N* or *M* times (ex: \`A*100\-200\`)\. .fi .LP .TP \fB-o\fR, \fB--output\fR \fIPATH\fP The output PATH to write the fuzzer to\. .LP .TP \fB-c\fR, \fB--command\fR \fICOMMAND\fP The command to run with the fuzzed data\. All occurrences of \fB#string#\fR will be replaced with the fuzzed data, and occurrences of \fB#path#\fR will be replaced with the path to the fuzzed data\. .LP .TP \fB-t\fR, \fB--tcp\fR \fIHOST\fP:\fIPORT\fP The TCP service to send the fuzzed data to\. .LP .TP \fB-u\fR, \fB--udp\fR \fIHOST\fP:\fIPORT\fP The UDP service to send the fuzzed data to\. .LP .TP \fB-p\fR, \fB--pause\fR \fISECONDS\fP Pause in between mutations\. .LP .SH EXAMPLES .LP .TP \fBronin-fuzzer fuzz -i http_request.txt -o bad.txt -r unix_path:bad_strings\fR Fuzzes a HTTP request, replacing every occurrence of a UNIX path, with strings from the \fBbad_strings\fR method\. .LP .SH LINKS .LP .PP Ronin Regular Expressions https:\[sl]\[sl]ronin\-rb\.dev\[sl]docs\[sl]ronin\-support\[sl]Regexp\.html .LP .TP \fBRonin::Fuzzer\fR https:\[sl]\[sl]ronin\-rb\.dev\[sl]docs\[sl]ronin\-fuzzer\[sl]Ronin\[sl]Fuzzer\.html .LP .SH AUTHOR .LP .PP Postmodern .MT postmodern\.mod3\[at]gmail\.com .ME .LP