LostFuzzer: Passive URL Fuzzing & Nuclei DAST for Bug Hunters

Summary

• A new tool called LostFuzzer has been created to streamline the process of finding bugs in URL endpoints.
• The tool works by extracting only valid URLs with full query parameters and ensuring they are correctly formatted for security testing.
• This makes the hunting process for bugs more effective, cleaner and quicker.
• The current methods used include ParamSpider, which creates URLs with excessive parameters, breaking nuclei DAST scans as each query needs a valid parameter to work.
• This new tool rectifies this issue.

By coffinxp

Original Article