bug-bounty

Hey, here we need add url decoding cuz that invalid link with symbols of get request like ?, &, = etc

p.s thx for awesome tool

There are few scenarios I tested before filed this issue.
Let's dive into most expected.
Steps to reproduce:

1. Create custom module called ffuf-hostpath-lfi, note -mr param

[{
        "command":"/home/op/go/bin/ffuf -u HOSTPATH -w input:PATH -w _wordlist_:HOST -mr \"admin|root|info\" -of csv -o output",
        "wordlist":"/home/op/lists/seclists/Discovery/Web-Content/big.txt",