Skip to content

Bug: FUZZ not iterating when used only in POST data (-d) #96

Description

@rjvkn

Description

When using wenum , if the FUZZ keyword is only present in the POST data (e.g., with the -d option), it does not iterate over the wordlist. Instead, it sends a single request and then finishes.

This behavior differs from wfuzz, which correctly iterates over the wordlist even when FUZZ is only in POST data.

wenum command

 wenum -u http://10.10.10.122/login.php -w /usr/share/seclists/Usernames/Honeypot-Captures/multiplesources-users-fabian-fingerle.de.txt --hr "not found" -d "inputUsername=FUZZ&inputOTP=12345"
17.04.2025 11:39:09 | INFO | Starting
17.04.2025 11:39:14 | DEBUG | MonitorQueue - No remaining requests left. Sending a stop item
17.04.2025 11:39:14 | DEBUG | core.py: Stopping the queues
17.04.2025 11:39:14 | DEBUG | QueueManager: Closing all queues
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to SeedQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to HttpQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to FilterQueue
17.04.2025 11:39:14 | DEBUG | FilterQueue stopped
17.04.2025 11:39:14 | DEBUG | __read_http_results stopped
17.04.2025 11:39:14 | DEBUG | SeedQueue stopped
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to CLIPrinterQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: Sent stop signal to MonitorQueue
17.04.2025 11:39:14 | DEBUG | MonitorQueue: Stopping
17.04.2025 11:39:14 | DEBUG | _process_curl_handles stopped
17.04.2025 11:39:14 | DEBUG | HttpQueue stopped
17.04.2025 11:39:14 | DEBUG | CLIPrinterQueue stopped
17.04.2025 11:39:14 | DEBUG | QueueManager: All queues have stopped
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue SeedQueue with size 0
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue HttpQueue with size 0
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue FilterQueue with size 0
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue CLIPrinterQueue with size 0
17.04.2025 11:39:14 | DEBUG | QueueManager joining queue MonitorQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: joining LastQueue
17.04.2025 11:39:14 | DEBUG | QueueManager: All queues have joined
17.04.2025 11:39:14 | INFO | 
# Processed Requests: 1
# Generated Plugin Requests: 0
# Filtered Requests: 1
# Amount of Seeds: 0

# Seed List:
[]

# Big subdirectories:

# Total Time: 0:00:04
17.04.2025 11:39:14 | DEBUG | Ended

wenum

Image

wfuzz

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions