skills.rest
danielmiessler
danielmiesslerCOMMUNITY
Explore all skills by this author →
Website𝕏@danielmiesslerGitHub

ffuf-web-fuzzing

Fuzz web targets with FFUF to discover hidden directories, files, and subdomains.

17.4k|2.3k|Updated Sep 8, 2025
Search Tags:#security#penetration testing#ffuf#reconnaissance#authenticated fuzzing#vulnerability discovery#web fuzzing
One-click install
npx skills add https://github.com/danielmiessler/Personal_AI_Infrastructure --skill ffuf-web-fuzzing
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ffuf-web-fuzzing
Source: https://github.com/danielmiessler/Personal_AI_Infrastructure/tree/main/.claude/skills/ffuf
Command: npx skills add https://github.com/danielmiessler/Personal_AI_Infrastructure --skill ffuf-web-fuzzing

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ffuf, and includes references (resource) components.

What problem does it solve?

Traditional web fuzzing is often slow, noisy, and prone to false positives, making it inefficient for penetration testing. This skill provides expert guidance for ffuf (Fuzz Faster U Fool), a high-speed web fuzzer, enabling efficient discovery of hidden content and vulnerabilities with significantly reduced noise.

Core Features & Use Cases

  • Automated Noise Reduction: Emphasizes auto-calibration (-ac) to automatically detect and filter out repetitive false positive responses, making results clearer and analysis much faster.
  • Authenticated Fuzzing: Guides on using raw HTTP requests for complex authenticated scenarios, allowing fuzzing with JWT tokens, session cookies, and custom headers.
  • Use Case: During a penetration test, you need to find hidden admin panels, API endpoints, or IDOR vulnerabilities. Use this skill to quickly fuzz directories, parameters, or headers, even with complex authentication, and get actionable results.

Quick Start

Basic directory fuzzing with auto-calibration (ALWAYS USE -ac)

ffuf -w /path/to/wordlist.txt -u https://target.com/FUZZ -ac

Frequently Asked Questions about ffuf-web-fuzzing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I discover hidden directories and files on a web application?▼

Web fuzzing with ffuf systematically tests URLs against wordlists to reveal hidden directories, files, and endpoints. Use auto-calibration (-ac) to filter false positives automatically, returning only genuine responses that matter for penetration testing.

Can I use ffuf to fuzz authenticated endpoints with tokens and session cookies?▼

Yes. Ffuf supports raw HTTP requests, allowing you to inject JWT tokens, session cookies, and custom headers into fuzz requests. This enables authenticated fuzzing of protected API endpoints and admin panels during penetration tests.

What's the fastest way to reduce noise when fuzzing web applications?▼

Auto-calibration (-ac) in ffuf automatically detects and filters repetitive false positive responses, dramatically reducing noise. Combined with matchers and filters, it surfaces only actionable results without manual filtering overhead.

How do I fuzz multiple input locations like parameters, POST data, and headers simultaneously?▼

Ffuf's FUZZ keyword lets you define multiple fuzzing locations within the same request template—directories, parameters, POST bodies, and headers. This discovers IDOR vulnerabilities, hidden parameters, and endpoint variations in a single fuzzing run.

Does ffuf work for subdomain enumeration and reconnaissance?▼

Yes. Ffuf can enumerate subdomains by fuzzing DNS names against wordlists, making it useful for reconnaissance workflows. Combined with directory and parameter fuzzing, it provides comprehensive web reconnaissance for penetration testing.

Related Skills

Explore More Software Engineering Skills→
gongzeqgongzeq

ffuf-dir-fuzz

Fuzz URLs or raw HTTP requests with wordlists to discover hidden web paths.

Community
Intermediate
utkusenutkusen
1.3k

sast-idor

Identify and map IDOR vulnerabilities in REST or GraphQL endpoints.

Community
Advanced
jokken79jokken79
1

Burp Suite Web Application Testing

Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.

Community
Advanced
AeonDaveAeonDave
15

gobuster

Enumerate directories, DNS subdomains, and virtual hosts on web servers.

Community
Intermediate