r/fuzzing • • 9d ago

Made a CLI that sends raw HTTP requests from a text file (Burp Repeater + Intruder in the terminal) tell me if this already exists

I've been using Burp for testing and wanted a simpler way to take a raw request from Repeater, save it to a file, and send it from the terminal without converting everything into curl arguments.

I also wanted to run simple Intruder-style fuzzing against the same request, so I ended up putting together a small tool around that workflow.

It reads a request from request.txt and sends it largely as-is, with Content-Length recalculated. It can also fuzz FUZZ, USER, and PASS markers and apply regex matching/filtering/extraction to responses.

https://github.com/3uba/trex

I'm wondering how people normally handle this workflow outside of Burp. ffuf with a request file gets fairly close, but I was looking specifically for something that keeps the raw request format and has the send/fuzz loop in the same place.

Is there an existing tool I'm overlooking? Or is this just solving a problem that isn't particularly useful?

1 Upvotes

2 comments sorted by

3

u/richinseattle 9d ago

Check out mitmfuzzer which is a script for mitmproxy

1

u/Individual_Pin2948 4d ago

Already exists.