Fuzz web targets to discover hidden endpoints, directories, and misconfigurations.
npx skills add https://github.com/zebbern/termstack --skill ffuf-fuzz-zebbern
Please help me install this Agent Skill. Skill: ffuf-fuzz Source: https://github.com/zebbern/termstack/tree/main/.github/skills/ffuf-fuzz Command: npx skills add https://github.com/zebbern/termstack --skill ffuf-fuzz-zebbern
Web application testing often requires manual, time-consuming discovery of hidden endpoints, directories, and misconfigurations. This Skill automates that process by fuzzing targets to reveal unseen resources and entry points.
Start a basic fuzzing pass against a target by providing a wordlist and a FUZZ placeholder to drive discovery.
High-intent search queries and answers about installing and using this skill.
Directory discovery during web app testing automates enumerating accessible paths and files on targets. By using wordlists and a FUZZ placeholder, fuzzing reveals unseen resources and entry points to map the application's surface area efficiently.
Yes, virtual host discovery works by fuzzing Host headers to uncover multiple hosts behind a single IP. This technique reveals hidden virtual hosts during security assessments without needing additional network access.
Parameter fuzzing identifies injection points by sending varied GET and POST data to web targets. It tests weak inputs through automated payload delivery, helping uncover misconfigurations and potential vulnerabilities.
Automated web discovery for APIs uses fuzzing to enumerate resources with wordlists and common filters. This approach refines results to reveal hidden endpoints and misconfigurations quickly, prioritizing remediation efforts.
Yes, you need a wordlist to start fuzzing hidden web resources. A basic fuzzing pass requires providing a wordlist alongside a FUZZ placeholder to drive directory, file, and endpoint discovery.
Automated fuzzing replaces manual, time-consuming endpoint discovery by rapidly enumerating resources. It applies to web applications and APIs, revealing misconfigurations and unseen entry points much faster than manual testing.
AeonDaveFuzz HTTP endpoints with wordlists to discover directories, parameters, and virtual hosts.
taracodlabsAssesses host TLS/SSL security via the LiveSoftworks Labs API and returns grade and vulnerability report.
MicrockAutomate web content discovery by fuzzing targets with ffuf to reveal hidden resources.
SkobynDetect login brute force, OTP/2FA brute force, and credential stuffing vulnerabilities.
