crlfuzz
Scans URLs for CRLF injection with encoded variants. Use on a focused URL list, not the whole program.
Tags: crlf, headers, xss
- Category
- inject
- Maintenance signal
- maintained
Use this when: XSS. A split header is a lead when the response reflects it. Record the header.
Install
go
go install github.com/dwisiswant0/crlfuzz/cmd/crlfuzz@latestCommand templates
Silent scan
crlfuzz -l {input} -s -o {output}