#!/usr/bin/env bash
set -euo pipefail

usage(){
  cat >&2 <<USAGE
Usage: $(basename "$0") <url-with-FUZZ> [wordlist]
  e.g. http://10.10.10.10/index.php?FUZZ=1
  default wordlist: /usr/share/wordlists/seclists/Discovery/Web-Content/burp-parameter-names.txt
USAGE
  exit 1
}

url=${1:-}
[[ -z "$url" ]] && usage
wordlist=${2:-/usr/share/wordlists/seclists/Discovery/Web-Content/burp-parameter-names.txt}

outdir=${OUTDIR:-scans}
mkdir -p "$outdir"
ts=$(date +%Y%m%d_%H%M%S)
base="$outdir/ffuf_params_$(echo -n "$url" | tr '/:' '__')_${ts}"

ffuf -u "$url" -w "$wordlist" -fs 0 -of csv -o "$base.csv" 2>&1 | tee "$base.log"
echo "[+] Results saved to $base.csv"