ffuf-web-fuzzing

Name: ffuf-web-fuzzing
Availability: InStock
Author: Microck

Automate web content discovery by fuzzing targets with ffuf to reveal hidden resources.

322|45|Updated Dec 1, 2025

Search Tags:#automation #templates #ffuf #security-testing #web-fuzzing

Ready to run

npx skills add https://github.com/Microck/ordinary-claude-skills --skill ffuf-web-fuzzing-microck

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ffuf-web-fuzzing
Source: https://github.com/Microck/ordinary-claude-skills/tree/main/skills_all/ffuf-claude-skill
Command: npx skills add https://github.com/Microck/ordinary-claude-skills --skill ffuf-web-fuzzing-microck

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides expert guidance for using FFUF for web fuzzing, including authenticated fuzzing, auto-calibration, and result analysis.

Core Features & Use Cases

Directory/file discovery, subdomain enumeration, parameter fuzzing
Authenticated fuzzing templates and result interpretation

Quick Start

Run an authenticated fuzzing task against a target using the provided FFUF templates.

Frequently Asked Questions about ffuf-web-fuzzing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I discover hidden directories and files on a web application?▼

Web fuzzing with ffuf automates directory and file discovery by sending requests with wordlist variations to a target URL, revealing hidden paths, API endpoints, and resources. Ffuf supports multiple fuzzing modes and output filtering to identify valid content quickly.

Can I fuzz authenticated endpoints that require login credentials?▼

Yes, ffuf supports authenticated fuzzing through templates that include session tokens, cookies, and authorization headers. The Skill provides ready-to-use templates for authenticated request scenarios and guidance on maintaining session state across fuzzing runs.

What's the best way to enumerate subdomains across a target domain?▼

Subdomain enumeration with ffuf uses DNS or HTTP fuzzing modes with FUZZ keyword placement in domain names. Combine wordlists targeting common subdomain patterns and use auto-calibration (-ac) to filter false positives from wildcard responses.

How do I fuzz API parameters and POST data to find injection vulnerabilities?▼

Parameter fuzzing places the FUZZ keyword in query strings, request bodies, or headers, then iterates through wordlists to test parameter acceptance and behavior. Ffuf's multi-wordlist modes (clusterbomb, pitchfork, sniper) enable simultaneous fuzzing of multiple parameter positions.

Does ffuf support rate limiting and timing controls for large-scale fuzzing?▼

Yes, ffuf provides rate and timing controls to throttle requests, avoid detection, and respect target resource limits. These controls prevent overwhelming targets and reduce blocking risk during extended fuzzing campaigns.

What does auto-calibration do, and when should I use it?▼

Auto-calibration (-ac) analyzes baseline responses to filter false positives caused by wildcard DNS or default error pages. Use it when the target returns many misleading responses, ensuring fuzzing results reflect genuine content discovery rather than noise.