Jan 112022
 

Scanning for public storage accounts in Azure is pretty fast using ffuf (and gobuster, but faster in ffuf):

gobuster fuzz -u "https://TARGET.blob.core.windows.net/FUZZ/?restype=container&comp=list" -b 404,400 -w /usr/share/wordlists/dirb/big.txt

and
ffuf -u "https://TARGET.blob.core.windows.net/uploads/FUZZ/?restype=container&comp=list" -fc 400,404 -w /usr/share/wordlists/dirb/big.txt -t 100 -timeout 30 -v

 

 Leave a Reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

(required)

(required)