Ben 'epi' Risher

462 Followers
391 Following
29 Posts

Interested in vulnerability research, rust, fuzzing, offensive security, llvm stuff, symbolic execution, and reversing.

In my spare (computer-related) time, I maintain feroxbuster and feroxfuzz as well as contribute to and/or maintain various other open source projects.

GitHubhttps://github.com/epi052
Bloghttps://epi052.gitlab.io/notes-to-self/
Twitterhttps://twitter.com/epi052

howdy!

I pushed a new feroxbuster release this morning! Notable changes:

--request-file for scanning based on a raw http request (e.g. from burp)

--limit-bars to cap the number of progress bars shown during a scan

--scan-dir-listings to recurse into dir listing enabled dirs

I also fixed the documentation site's search functionality and upgraded all the CI/CD pipelines.

docs: https://epi052.github.io/feroxbuster-docs/docs/

pre-built binaries are available on the releases page: https://github.com/epi052/feroxbuster/releases

Happy hacking!

Documentation

A fast, simple, recursive content discovery tool written in Rust.

feroxbuster

New #feroxbuster release!

Github user lavafroth added

--server-certs
--client-cert
--client-key

client-* options enable ferox to talk to servers that verify clients ๐ŸŽ‰

server-certs allows you to verify unknown servers, instead of using --insecure

https://github.com/epi052/feroxbuster/releases

Releases ยท epi052/feroxbuster

A fast, simple, recursive content discovery tool written in Rust. - epi052/feroxbuster

GitHub

Howdy!

New version of feroxbuster is out๐ŸŽ‰ The biggest change is in how auto-filtering is done. I'm keen to hear feedback on how it's working for you. If ferox doesn't correctly auto-filter your 404-like responses, let me know so we can make it better!

https://github.com/epi052/feroxbuster/releases/tag/v2.9.0

Release v2.9.0 ยท epi052/feroxbuster

What's Changed banner is shown again after exiting scan management menu by @aancw in #804 improved auto-filtering accuracy Fixed issue where a wildcard redirect caused every request to recurse int...

GitHub

7๏ธโƒฃ Table-top an assumed breach and having to do a complete internal repo credential rotation.

Even the best sec strategy can fail, this process needs to be defined and practiced.

8/x

Fuzzing101 with LibAFL - Part I: Fuzzing Xpdf -

Part one of a series covering fuzzer development using LibAFL

#AdventOfCode Day 16: "Proboscidea Volcanium"

https://youtube.com/watch?v=rN4tVLnkgJU

By far the hardest challenge yet this year. I'll use a recursive algorithm with caching to walk a graph turning on valves in reasonable time. #python

Day 16: Proboscidea Volcanium [AOC2022 Python]

YouTube

๐Ÿ†•๐Ÿฆ€ Just an hour ago, #rustlang 1.66.0 was released!

As usual, here's a thread with some of the highlights. ๐Ÿงต

1/12

@novafacing congrats on the last final!๐ŸŽ‰โ€‹
I've just discovered this fantastic blog series about Rust & LibAFL by @epi ! Thanks for sharing these ๐Ÿป #security #BugBounty

@MrTuxracer

tysm! glad you found it useful ๐ŸŽ‰โ€‹

here's a link to the first in the series, for anyone interested

https://epi052.gitlab.io/notes-to-self/blog/2021-11-01-fuzzing-101-with-libafl/

Fuzzing101 with LibAFL - Part I: Fuzzing Xpdf -

Part one of a series covering fuzzer development using LibAFL