skills.rest
AnderHonorato
AnderHonoratoCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ffuf-web-fuzzing

Guides ffuf web fuzzing for directory, subdomain, parameter, and authenticated endpoint discovery during penetration testing.

Updated Aug 28, 2026
Search Tags:#security#penetration testing#ffuf#web fuzzing#subdomain enumeration#directory discovery#idor testing
One-click install
npx skills add https://github.com/AnderHonorato/Mem-rias-IA---Infinity --skill ffuf-web-fuzzing-anderhonorato
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ffuf-web-fuzzing
Source: https://github.com/AnderHonorato/Mem-rias-IA---Infinity/tree/main/Manus/Skills/snapshots/jthack-ffuf
Command: npx skills add https://github.com/AnderHonorato/Mem-rias-IA---Infinity --skill ffuf-web-fuzzing-anderhonorato

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Web penetration testers need to discover hidden directories, files, subdomains, parameters, and API endpoints quickly, but raw fuzzing output is often flooded with false positives and authenticated requests are hard to configure on the command line. ## Core Features & Use Cases - Comprehensive ffuf command guidance: Covers directory discovery, subdomain enumeration, parameter fuzzing, POST data fuzzing, header fuzzing, and multi-wordlist modes (clusterbomb, pitchfork, sniper). - Authenticated fuzzing via raw requests: Explains how to capture full HTTP requests with JWT tokens, session cookies, or API keys into a req.txt file and fuzz them with ffuf --request, with ready-made templates for common auth scenarios. - Result analysis and helper tooling: Includes a Python helper script that analyzes ffuf JSON output for anomalies, generates req.txt templates, and creates number-based wordlists for IDOR testing. - Use Case: During an authorized web application assessment, you capture an authenticated API request from Burp Suite, insert the FUZZ keyword at the user ID parameter, and run ffuf with auto-calibration to test for IDOR vulnerabilities across thousands of IDs. ## Quick Start Ask the assistant to show you how to fuzz directories on a target web application using ffuf with auto-calibration and an appropriate SecLists wordlist.

Frequently Asked Questions about ffuf-web-fuzzing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fuzz directories with ffuf?▼

Run ffuf with a wordlist and place the FUZZ keyword in the URL path, for example: ffuf -w wordlist.txt -u https://target.com/FUZZ -ac. The -ac flag enables auto-calibration, which filters out repetitive false positive responses automatically.

How do I fuzz authenticated endpoints with ffuf?▼

Capture the full authenticated HTTP request from Burp Suite or browser DevTools, save it to a req.txt file, replace the value to fuzz with the FUZZ keyword, then run ffuf --request req.txt -w wordlist.txt -ac. This preserves JWT tokens, cookies, and custom headers.

What wordlists should I use with ffuf?▼

Use SecLists collections: raft-large-directories.txt for directories, subdomains-top1million-5000.txt for subdomains, and burp-parameter-names.txt for parameters. Match the wordlist size to your scope, starting with smaller lists for quick scans.

Why does ffuf return thousands of false positives?▼

False positives occur when the target returns identical responses for missing resources, such as custom 404 pages. Use the -ac auto-calibration flag so ffuf detects and filters these repetitive responses, or filter manually by response size with -fs or status code with -fc.

How do I avoid getting blocked while fuzzing with ffuf?▼

Reduce the request rate with -rate 2, add random delays with -p 0.5-1.5, and lower thread count with -t 10. Routing traffic through a proxy with -x and randomizing the User-Agent header also helps avoid WAF and IDS detection.

Can ffuf test for IDOR vulnerabilities?▼

Yes, ffuf supports IDOR testing by fuzzing numeric IDs in authenticated requests. Save an authenticated request with FUZZ in the ID parameter, generate a number wordlist with the helper script, and run ffuf --request req.txt -w ids.txt -ac -mc 200.

Related Skills

Explore More Software Engineering Skills→
AeonDaveAeonDave
15

subfinder

Enumerate subdomains for a target domain using passive OSINT sources.

Community
Intermediate
awsaws
2.5k

remediating-with-aws-security-agent

Export AWS Security Agent findings and triage them into a prioritized remediation plan.

Official
Advanced
jokken79jokken79
1

Burp Suite Web Application Testing

Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.

Community
Advanced
0X6C78790X6C7879

recon-dir-scan

Enumerate exposed directories and files on web applications using ffuf, gobuster, dirsearch, and feroxbuster.

Community
Intermediate