laconicwolf/http-header-fuzzer

A multithreaded Python3 program that fuzzes HTTP headers and values and outputs the results to a CSV file.

http-header-fuzzer's Issues

'Name 'credentials' is not defined' message and skips tests when using Basic auth.

Problem:
'Name 'credentials' is not defined' message for every test, all tests skipped.

Steps:

1. Run with python http_header_fuzzer.py -v -ah -at -p 192.168.0.2:8080 -c "Authorization: Basic base64encodedcredshereendingwith=" -t 5 -csv out.csv -uf in.txt
2. in.txt should contain a test site URL which uses the basic auth, and

Expected:
all tests should run

Actual:
all tests failed with

[*] Fuzzing Host header at URL
[-] Unable to connect to site: URL
[*] name 'credentials' is not defined

Python 3.7.9 x64
Windows 10 x64 2004