[GH-ISSUE #393] [Feature Request] Fuzzing Tab #389

Open
opened 2026-03-03 19:18:09 +03:00 by kerem · 5 comments
Owner

Originally created by @joanbono on GitHub (Feb 5, 2020).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/393

Originally assigned to: @NghiaTranUIT on GitHub.

It would be nice to have a feature or a tab called Fuzz or Fuzzing.

The main idea on this would be to test how an API, for example, responds after multiple requests in a short amount of time.

What I was thinking was something like:
An user is able to select multiple fields and enclose them in special characters (In the example, I'm enclosing it using $$, as $$_whathever_$$:

image

From this point, select or load a txt file with a list:

# list.txt
shutdown
test1
test2
test3
start
stop

And then, after clicking the Fuzz button, Proxyman replaces the enclosed fields with the items in the list.

What do you think?

Originally created by @joanbono on GitHub (Feb 5, 2020). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/393 Originally assigned to: @NghiaTranUIT on GitHub. It would be nice to have a feature or a tab called Fuzz or Fuzzing. The main idea on this would be to test how an API, for example, responds after multiple requests in a short amount of time. What I was thinking was something like: An user is able to select multiple fields and enclose them in special characters (In the example, I'm enclosing it using `$$`, as `$$_whathever_$$`: ![image](https://user-images.githubusercontent.com/7288621/73818320-5cebcd00-47ed-11ea-945a-822c40e022ed.png) From this point, select or load a txt file with a list: ```sh # list.txt shutdown test1 test2 test3 start stop ``` And then, after clicking the **Fuzz** button, Proxyman replaces the enclosed fields with the items in the list. What do you think?
Author
Owner

@NghiaTranUIT commented on GitHub (Feb 5, 2020):

I would put it as a Scripting feature, which is in the Road map.

Basically, the end-user could write JS to call the Compose and construct the URL (with Header, URL, Body) and send. It's flexible than hard coding this feature inside Proxyman.

ETA could be in this year.

For now, I suggest that you could write small NodeJS (axios lib) code to automatically do it and make sure set the Proxy to 9090. How do you think?

<!-- gh-comment-id:582343151 --> @NghiaTranUIT commented on GitHub (Feb 5, 2020): I would put it as a Scripting feature, which is in the Road map. Basically, the end-user could write JS to call the Compose and construct the URL (with Header, URL, Body) and send. It's flexible than hard coding this feature inside Proxyman. ETA could be in this year. For now, I suggest that you could write small NodeJS (axios lib) code to automatically do it and make sure set the Proxy to 9090. How do you think?
Author
Owner

@joanbono commented on GitHub (Feb 5, 2020):

Sure, thanks! :D

<!-- gh-comment-id:582376847 --> @joanbono commented on GitHub (Feb 5, 2020): Sure, thanks! :D
Author
Owner

@NghiaTranUIT commented on GitHub (Feb 5, 2020):

Thank. I will push Scripting feature soon 👍

<!-- gh-comment-id:582392705 --> @NghiaTranUIT commented on GitHub (Feb 5, 2020): Thank. I will push Scripting feature soon 👍
Author
Owner

@shirshak55 commented on GitHub (Feb 5, 2020):

@NghiaTranUIT Yea we can already use http tools like axios but ability to make plugins for proxyman would solve lots of hassle like this.

<!-- gh-comment-id:582537574 --> @shirshak55 commented on GitHub (Feb 5, 2020): @NghiaTranUIT Yea we can already use http tools like axios but ability to make plugins for proxyman would solve lots of hassle like this.
Author
Owner

@NghiaTranUIT commented on GitHub (Feb 6, 2020):

yes, sure. I receive a lot feature request for the plugin as well as the scripting too. Would support it after the Remote Map, which is on progress now 🙌

<!-- gh-comment-id:582700111 --> @NghiaTranUIT commented on GitHub (Feb 6, 2020): yes, sure. I receive a lot feature request for the plugin as well as the scripting too. Would support it after the Remote Map, which is on progress now 🙌
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Proxyman#389
No description provided.