the_open_door
coffee
ESEN
← Tools

ffuf

Blazing-fast Go web fuzzer: directories, parameters and virtual hosts.

Blazing-fast web fuzzer written in Go. It swaps the FUZZ keyword in the URL, headers or body for each wordlist line, so it covers directories, parameters, values and virtual hosts. Noise is filtered by code, size, words or lines (-fc/-fs/-fw/-fl).

Family Web discovery & fuzzing

Flags -u FUZZ -w -fs -mc

Concepts Web Content Discovery (Directory Fuzzing), Virtual Host Fuzzing, File Upload to RCE

Cheatsheet Discovery & fuzzing

Installation

sudo apt install -y ffuf

Useful commands5 commands

Appears in

Some machines where its use is documented; not an exhaustive list.