Description
When using wenum , if the FUZZ keyword is only present in the POST data (e.g., with the -d option), it does not iterate over the wordlist. Instead, it sends a single request and then finishes.
This behavior differs from wfuzz, which correctly iterates over the wordlist even when FUZZ is only in POST data.
wenum command
wenum -u http://10.10.10.122/login.php -w /usr/share/seclists/Usernames/Honeypot-Captures/multiplesources-users-fabian-fingerle.de.txt --hr "not found" -d "inputUsername=FUZZ&inputOTP=12345"
17.04.2025 11:39:09 | INFO | Starting
17.04.2025 11:39:14 | DEBUG | MonitorQueue - No remaining requests left. Sending a stop item
17.04.2025 11:39:14 | DEBUG | core.py: Stopping the queues
17.04.2025 11:39:14 | DEBUG | QueueManager: Closing all queues
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to SeedQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to HttpQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to FilterQueue
17.04.2025 11:39:14 | DEBUG | FilterQueue stopped
17.04.2025 11:39:14 | DEBUG | __read_http_results stopped
17.04.2025 11:39:14 | DEBUG | SeedQueue stopped
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to CLIPrinterQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to MonitorQueue
17.04.2025 11:39:14 | DEBUG | MonitorQueue: Stopping
17.04.2025 11:39:14 | DEBUG | _process_curl_handles stopped
17.04.2025 11:39:14 | DEBUG | HttpQueue stopped
17.04.2025 11:39:14 | DEBUG | CLIPrinterQueue stopped
17.04.2025 11:39:14 | DEBUG | QueueManager: All queues have stopped
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue SeedQueue with size 0
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue HttpQueue with size 0
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue FilterQueue with size 0
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue CLIPrinterQueue with size 0
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue MonitorQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: joining LastQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: All queues have joined
17.04.2025 11:39:14 | INFO |
# Processed Requests: 1
# Generated Plugin Requests: 0
# Filtered Requests: 1
# Amount of Seeds: 0
# Seed List:
[]
# Big subdirectories:
# Total Time: 0:00:04
17.04.2025 11:39:14 | DEBUG | Ended
wenum

wfuzz

Description
When using
wenum, if theFUZZkeyword is only present in the POST data (e.g., with the-doption), it does not iterate over the wordlist. Instead, it sends a single request and then finishes.This behavior differs from
wfuzz, which correctly iterates over the wordlist even whenFUZZis only in POST data.wenum command
wenum
wfuzz