ffuf-fuzz

Automate web fuzzing for directories, parameters, and virtual hosts.

1.6k|234|Updated Dec 7, 2019

Search Tags:#ffuf #web-security #fuzzing #subdomain-enumeration #directory-discovery #parameter-fuzz

Ready to run

npx skills add https://github.com/wgpsec/AboutSecurity --skill ffuf-fuzz

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ffuf-fuzz
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/ffuf-fuzz
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill ffuf-fuzz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

ffuf-fuzz provides a flexible, explicit framework to perform web fuzzing, reducing manual enumeration and speeding up discovery.

Core Features & Use Cases

Directory/file discovery using FUZZ markers with custom wordlists
Parameter fuzzing for GET/POST requests and JSON payloads
Virtual host and subdomain enumeration with host-based fuzzing
Multi-location fuzz with multiple FUZZ positions and advanced filtering

Quick Start

Run a directory discovery against a target using ffuf with a common wordlist and recursion to enumerate paths.

Frequently Asked Questions about ffuf-fuzz

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate directory discovery and subdomain enumeration for web app security assessments?▼

Web fuzzing automates directory discovery and subdomain enumeration by fuzzing URLs, parameters, and virtual hosts with custom dictionaries. It applies to penetration testing workflows to reduce manual enumeration and speed up discovery across multiple fuzz positions.

Can I fuzz multiple URL parameters and POST request positions at the same time?▼

Yes, parameter fuzzing supports multiple FUZZ positions simultaneously for GET/POST requests and JSON payloads. Multi-location fuzzing allows you to target several URL or parameter positions in a single run using custom wordlists.

What is the best way to filter out false positive responses during web application fuzzing?▼

Web application fuzzing provides advanced filtering options to remove false positives. You can apply custom filtering rules alongside concurrency controls to isolate valid directory and parameter discoveries from default error pages.

Does web fuzzing support virtual host discovery using host-based fuzzing techniques?▼

Yes, virtual host and subdomain enumeration utilizes host-based fuzzing to identify active hosts. By fuzzing the Host header with custom dictionaries, you can discover hidden virtual hosts during security reconnaissance.

How do I perform recursive directory discovery using custom wordlists?▼

Directory discovery uses FUZZ markers with custom wordlists and recursion to enumerate paths. This allows deep file and directory discovery against a target by automatically fuzzing nested URL structures.