Automate web fuzzing for directories, parameters, and virtual hosts.
npx skills add https://github.com/wgpsec/AboutSecurity --skill ffuf-fuzz
Please help me install this Agent Skill. Skill: ffuf-fuzz Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/ffuf-fuzz Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill ffuf-fuzz
ffuf-fuzz provides a flexible, explicit framework to perform web fuzzing, reducing manual enumeration and speeding up discovery.
Run a directory discovery against a target using ffuf with a common wordlist and recursion to enumerate paths.
High-intent search queries and answers about installing and using this skill.
Web fuzzing automates directory discovery and subdomain enumeration by fuzzing URLs, parameters, and virtual hosts with custom dictionaries. It applies to penetration testing workflows to reduce manual enumeration and speed up discovery across multiple fuzz positions.
Yes, parameter fuzzing supports multiple FUZZ positions simultaneously for GET/POST requests and JSON payloads. Multi-location fuzzing allows you to target several URL or parameter positions in a single run using custom wordlists.
Web application fuzzing provides advanced filtering options to remove false positives. You can apply custom filtering rules alongside concurrency controls to isolate valid directory and parameter discoveries from default error pages.
Yes, virtual host and subdomain enumeration utilizes host-based fuzzing to identify active hosts. By fuzzing the Host header with custom dictionaries, you can discover hidden virtual hosts during security reconnaissance.
Directory discovery uses FUZZ markers with custom wordlists and recursion to enumerate paths. This allows deep file and directory discovery against a target by automatically fuzzing nested URL structures.
ricardoo022Fuzz target URLs with wordlists to discover hidden API endpoints and parameters.
dapperdiversTest POST parameters for SQL injection, XSS, and command injection vulnerabilities.
MicrockAutomate web content discovery by fuzzing targets with ffuf to reveal hidden resources.
AeonDaveEnumerate subdomains passively via OSINT sources with optional brute-force wordlists.
