# Cheat sheet - broken authentication

## Fuzz

| **Command**                                                                                                      | **Description**                          |
| ---------------------------------------------------------------------------------------------------------------- | ---------------------------------------- |
| `wfuzz -z file,/path/to/wordlist.txt -u http://127.0.0.1:80/site/FUZZ`                                           | Fuzz using a wordlist                    |
| `wfuzz -z file,/path/to/user.txt -z file,/path/to/pass.txt http://127.0.0.1/login.php -d "user=FUZZ&pass=FUZ2Z"` | Fuzz using POST method and two wordlists |
| `wfuzz -H Foo:FUZZ`                                                                                              | Fuzz header                              |
| `-X GET , -X POST`                                                                                               | Choose method                            |

## Grep

| **Command**                       | **Description**                                                                                                                                                    |
| --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| `grep '[[:classname:]]' file.txt` | Find strings that contain a given class. Classes are: \[\[:graph:]], \[\[:lower:]], \[\[:print:]], \[\[:punct:]], \[\[:space:]], \[\[:upper:]], and \[\[:xdigit:]] |
| `grep -x '.\{123\}'`              | Find strings with length of 123                                                                                                                                    |

## Misc

| **Command**                           | **Description**      |
| ------------------------------------- | -------------------- |
| `echo -n academy \| xxd -p`           | Convert hex to ASCII |
| `echo -n 61636164656d79 \| xxd -r -p` | Convert ASCII to hex |