Ffuf
ffuf is a fest web fuzzer written in Go that allows typical directory discovery, virtual host discovery (without DNS records) and GET and POST parameter fuzzing.
General Usage
ffuf -u http://10.10.10.10/FUZZ -w raft-large-words.txtffuf -u http://10.10.10.10 -H "Host: FUZZ.domain" -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -e .php,.bak,.asp -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -recursion -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -recursion -recursion-depth 1 -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -x http://127.0.0.1:8080 -w raft-large-words.txtFilters & Matchers
ffuf -u http://10.10.10.10/FUZZ -fc 404,403 -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -mc 200 -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -fl 38 -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -ml 24 -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -fs 500 -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -ms 33 -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -fw 55 -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -mw 22 -w raft-large-words.txtInput
ffuf -request login.req -request-proto http -w raft-large-words.txtOutput
ffuf -u http://10.10.10.10/FUZZ -o ffuf.txt -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -of csv -o ffuf.csv -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -od ffuf-output -w raft-large-words.txtffuf -u http://10.10.10.10/FUZZ -debug-log debug.txt -w raft-large-words.txtReferences
Last updated