FFUF

Overview

Web Fuzzer

Resources

GitHub - ffuf/ffuf: Fast web fuzzer written in GoGitHub

Installation

GitHub - ffuf/ffuf: Fast web fuzzer written in GoGitHub

Usage

Help

ffuf -h

Subdomain

ffuf -w <wordlist>:FUZZ -u https://FUZZ.<domain>/

Virtual Host

ffuf -w <wordlist>:FUZZ -u https://<domain>/ -H 'Host: FUZZ.<domain>'

Directory

ffuf -w <wordlist>:FUZZ -u https://<domain>/FUZZ

Page

ffuf -w <wordlist>:FUZZ -u https://<domain>/FUZZ.php

Extension

ffuf -w <wordlist>:FUZZ -u https://<domain>/indexFUZZ

GET Parameter

ffuf -w <wordlist>:FUZZ -u https://<domain>/index?FUZZ=key

POST Data

ffuf -w <wordlist>:FUZZ -u https://<domain>/login -X POST -d 'FUZZ=key' -H 'Content-Type: application/x-www-form-urlencoded'

Value

ffuf -w <wordlist>:FUZZ -u https://<domain>/login -X POST -d 'id=FUZZ' -H 'Content-Type: application/x-www-form-urlencoded'

Useful Options

Change number of threads

-t <number>

Filter response size

-fs <size>

Specify extension

-e <extension>

Output full URL

-v