Web directory fuzzer in C
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
Máté Kukri d7f321544e Port to the newest version of cdat 7 months ago
cdat@8a9084bbf0 Port to the newest version of cdat 7 months ago
src Port to the newest version of cdat 7 months ago
.gitignore Formatting changes + TLS cleanup fix. 2 years ago
.gitmodules Port to the newest version of cdat 7 months ago
Makefile Port to the newest version of cdat 7 months ago
default Initial commit 2 years ago
license.txt Fixed typos 2 years ago
readme.md Added note about LibreSSL to readme. 2 years ago

readme.md

TNT

TNT is a minimalist, multi-threaded web fuzzer written in C.

DISCLAIMER

This tool is designed for security testing. If you use this tool, it is your responsibility to make sure you have permission to use it on the target system. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR THE (MIS)USE OF THIS TOOL.

Dependencies

TNT uses LibreSSL for TLS support, if you are on Linux you will likely need to build this library from source. By default the Makefile expects it to be in /opt/libressl, other locations require the Makefile to be edited.

Usage

Clone the repository, build with make. Either install the TNT binary using make install or just run it from the build directory.

It accepts the following options:

  • -t: optional, changes the number of threads, by default it's set to nproc
  • -i; optional, if set than certificate errors will be ignored when using TLS
  • -w: required, the wordlist file, it should contain newline separated words, the words are used to replace FUZZ in the URL template
  • -u: required, the target URL template, must include the word FUZZ, e.g. http://localhost/FUZZ.html

Copying

TNT is released under the ISC license. Check license.txt for more details.