OAuzzOAuth fuzz工具
OAuzz 是一個用于fuzz基于OAuth的web應(yīng)用服務(wù)的安全工具。OAuzz基于RFC5849和OAuth Request Body Hash 1.0 Draft 4實現(xiàn)。OAuzz支持三種簽名算法(OAuth 1.0),三種算法是明文、HMAC-SHA1、RSA-SHA1。
OAuzz 的命令：
| 命令 | 描述 |
| set VARIABLE VALUE | Set VARIABLE to VALUE. |
| unset [VARIABLE/S] | Unset VARIABLE (or all of them). |
| show [VARIABLE/S] | Show the value of VARIABLE (or all of them). |
| authenticate | OAuth Authentication with the server (default 3-legged). |
| test | Send a request with the correct values of each parameter. |
| fuzz | Run the fuzzer. |
| select | Perform a SQL Select query over the fuzzing results. |
| export | Export the database results to CSV, XML or HTML format. |
| help [COMMAND] | This help or the specified command help. |
| version | Show the version. |
| exit | Terminate the application. |
介紹內(nèi)容來自 pulog
評論
圖片
表情