[Request] Extensions without %EXT% about ffuf

[Shaddy]

Hi!

It seems that running as you pointed out does what you expect.

echo test | ffuf -e '.php','.html' -u https://www.example.com/FUZZ -mc all -w -

        /'___\  /'___\           /'___\
       /\ \__/ /\ \__/  __  __  /\ \__/
       \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\
        \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/
         \ \_\   \ \_\  \ \____/  \ \_\
          \/_/    \/_/   \/___/    \/_/

       v0.11git
________________________________________________

 :: Method       : GET
 :: URL          : https://www.example.com/FUZZ
 :: Matcher      : Response status: all
________________________________________________

test.html               [Status: 404, Size: 1270, Words: 338]
test.php                [Status: 404, Size: 1270, Words: 338]
test                    [Status: 404, Size: 1270, Words: 338]
:: Progress: [3/3] :: 0 req/sec :: Duration: [0:00:00] :: Errors: 0 ::

In case it wouldn't, you could have done it using -e '.php','.html','' which will do another extra test request.

So you can use it to also test it as dir, e.g. -e '.php','.html','/'

test                    [Status: 404, Size: 1270, Words: 338]
test.html               [Status: 404, Size: 1270, Words: 338]
test/                   [Status: 404, Size: 1270, Words: 338]
test.php                [Status: 404, Size: 1270, Words: 338]

Hope it helps!

P.S: What would be interesting tho, is to subtract the original payload from the equation using -E for example (which would test just everything but the unreplaced).

[SecT0uch]

I didn't manage to make it work. I'll try again later.

Thanks,