Loading...
Fast web fuzzer — discover directories, files, and parameters
go install github.com/ffuf/ffuf/v2@latestInstall via Gogit clone https://github.com/ffuf/ffuf.git && cd ffuf && go build .Clone and build from sourceffuf -hVerify installationffuf -u https://site.com/FUZZ -w /usr/share/wordlists/dirb/common.txtffuf -u "https://site.com/api?FUZZ=test" -w params.txtffuf -u "https://site.com" -X POST -d "user=admin&pass=FUZZ" -w passwords.txtffuf -w subdomains.txt -u "https://FUZZ.site.com"ffuf -u https://site.com/FUZZ -w files.txt -e .php,.html,.jsTarget URL with FUZZ placeholder
Wordlist file
Request method (GET, POST, PUT...)
POST data
File extensions to append
Filter by response status codes
Exclude specific status codes
Filter by response size
Number of concurrent threads
Request rate per second
Recursive scanning
Recursion depth