x8

Very fast alternative to ffuf for parameter fuzzing

Recon & OSINT10 commands

#fuzzing#fast#parameter#rust#brute-force

Installation

1Install via Docker, package manager, or build from source (Rust)

2Verify installation

# Note: Starting with v4.0.0, cargo install uses the crate branch (original reqwest).
# For the modified reqwest version, use Releases page or build from source.
# Docker
git clone https://github.com/Sh1Yo/x8
cd x8
docker build -t x8 .

# Linux — BlackArch
pacman -Sy x8

# Linux / Mac — from source
git clone https://github.com/Sh1Yo/x8
cd x8
cargo build --release
cp ./target/release/x8 /usr/local/bin

# Linux / Mac — via cargo
cargo install x8

# Windows — download from Releases
# https://github.com/Sh1Yo/x8/releases

Basic Usage

High-speed parameter fuzzing tool written in Rust

# Basic parameter fuzzing
x8 -u "https://site.com/endpoint?FUZZ=test" -w paramnames.txt

# Filter specific status codes
x8 -u "https://site.com/api?param=FUZZ" -w values.txt --filter-status 200,403

# High-speed fuzzing with 50 threads
x8 -u "https://site.com/endpoint" -w params.txt -t 200 --threads 50

# Multiple URLs from file
cat urls.txt | x8 -w params.txt -json

Command Reference

10 commands

1Target URL with FUZZ placeholder

-u

2Wordlist file path

-w

3Concurrent requests

-t

4Number of execution threads

--threads

5Filter by status codes

--filter-status

6HTTP method (GET/POST)

-m

7JSON output

-j

8POST data

-d

9Custom headers

-H

10Self-update to latest version

--self-update

When to Use

When you need faster results than ffuf

As alternative to ffuf in parameter fuzzing

Scanning large URL lists quickly

Combined with Arjun for comprehensive coverage

In high-performance environments with many threads

Notes & Tips

10-100x faster than ffuf in some scenarios

Written in Rust for high performance

Compatible with standard wordlists used with ffuf

Supports stdin piping for URL lists

Auto-update with --self-update flag

Low resource usage compared to Python tools

Can be combined with gf for result filtering

Suitable for quick initial fuzzing

Common Errors & Solutions

no response from the target

Check if server is running and URL is correct

rate limiting / 429 Too Many Requests

Reduce threads or add --delay flag

panic: runtime error

Check input and URL format

wordlist file not found

Use full path to wordlist file

# Note: Starting with v4.0.0, cargo install uses the crate branch (original reqwest). # For the modified reqwest version, use Releases page or build from source. # Docker git clone https://github.com/Sh1Yo/x8 cd x8 docker build -t x8 . # Linux — BlackArch pacman -Sy x8 # Linux / Mac — from source git clone https://github.com/Sh1Yo/x8 cd x8 cargo build --release cp ./target/release/x8 /usr/local/bin # Linux / Mac — via cargo cargo install x8 # Windows — download from Releases # https://github.com/Sh1Yo/x8/releases

# Basic parameter fuzzing x8 -u "https://site.com/endpoint?FUZZ=test" -w paramnames.txt # Filter specific status codes x8 -u "https://site.com/api?param=FUZZ" -w values.txt --filter-status 200,403 # High-speed fuzzing with 50 threads x8 -u "https://site.com/endpoint" -w params.txt -t 200 --threads 50 # Multiple URLs from file cat urls.txt | x8 -w params.txt -json