skills.rest
gongzeq
gongzeqCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ffuf-dir-fuzz

Fuzz URLs or raw HTTP requests with wordlists to discover hidden web paths.

Updated May 7, 2026
Search Tags:#ffuf#web-security#security-testing#endpoint-discovery#directory-fuzzing#asset_discovery
One-click install
npx skills add https://github.com/gongzeq/VAPT3 --skill ffuf-dir-fuzz
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ffuf-dir-fuzz
Source: https://github.com/gongzeq/VAPT3/tree/main/secbot/skills/ffuf-dir-fuzz
Command: npx skills add https://github.com/gongzeq/VAPT3 --skill ffuf-dir-fuzz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automatically discovers hidden web directories, files, and API endpoints by fuzzing against a target, reducing manual crawl effort and exposure of undiscovered assets.

Core Features & Use Cases

  • Fuzzes directories and content using a provided wordlist to reveal hidden resources.
  • Supports URL-based fuzzing (with FUZZ) and full raw HTTP requests for authenticated endpoints.
  • Integrates with security testing workflows to produce structured results for reporting.

Quick Start

Run the fuzzing with a target URL containing FUZZ and a wordlist to begin discovering hidden endpoints.

Frequently Asked Questions about ffuf-dir-fuzz

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I discover hidden web directories and API endpoints using a wordlist?▼

Directory fuzzing discovers hidden web directories and API endpoints by replacing a FUZZ keyword in a target URL with entries from a supplied wordlist to reveal undiscovered assets. It reduces manual crawl effort during security testing.

Can I fuzz authenticated endpoints with a raw HTTP request?▼

Yes, you can fuzz authenticated endpoints using raw_request mode by supplying a captured raw HTTP request containing session cookies or authorization headers, allowing the fuzzer to test protected multi-step paths.

How do I filter directory fuzzing results to reduce false positives?▼

You can filter directory fuzzing results using flexible matchers to control which responses are displayed. Optional rate control, timeouts, and proxy configurations help manage request flow and refine output accuracy.

Does web security fuzzing work for both web applications and APIs?▼

Web security fuzzing works for both web applications and APIs by targeting hidden paths and endpoints. It supports URL mode and raw HTTP request mode to apply fuzzing across various application layers and contexts.

What is the best way to fuzz multi-step paths during security testing?▼

The best way to fuzz multi-step paths is using a raw HTTP request with the FUZZ keyword inserted at the desired path segment. This allows precise targeting of complex application routes and authenticated endpoints.

Related Skills

MicrockMicrock
322

ffuf-web-fuzzing

Automate web content discovery by fuzzing targets with ffuf to reveal hidden resources.

Community
Advanced
wgpsecwgpsec
1.6k

api-fuzz

Automate API security testing with endpoint discovery and semantic fuzzing.

Official
Intermediate
usk6666usk6666
11

yorishiro-proxy

Intercept, replay, and fuzz HTTP/S traffic via a Model Context Protocol interface.

Community
Advanced
uphiagouphiago
1.1k

js-secrets-extraction

Detect hardcoded credentials and internal endpoints in JavaScript bundles and source maps.

Community
Intermediate