ffuf-web-fuzzing

Web fuzzing discovers hidden directories and files by systematically sending requests with wordlists to a target application. You can use ffuf to fuzz common paths, identify hidden content, and map out the application's attack surface during penetration testing.

Fuzzing API endpoints and parameters involves sending varied inputs to identify unexpected behavior or vulnerabilities. ffuf supports parameter fuzzing and API security testing by replacing the FUZZ keyword in the request URL or body with wordlist entries to discover valid parameters.

Yes, authenticated fuzzing is possible using raw HTTP requests. ffuf allows you to supply a raw HTTP request file, preserving headers like session cookies or authorization tokens, enabling complex authenticated scans against protected web application endpoints.

The FUZZ keyword acts as a placeholder in the target URL or request data that gets replaced by wordlist entries. Multi-wordlist mode in ffuf allows simultaneous fuzzing of multiple positions, such as directories and parameters, using distinct keywords like FUZZ and FUZ2Z.

Subdomain enumeration during reconnaissance involves fuzzing the Host header or DNS records with a wordlist to find valid subdomains. ffuf can automate this process, helping you discover active subdomains associated with the target domain for vulnerability discovery.

False positives in web fuzzing often occur due to custom error pages or varying response sizes. You can apply auto-calibration in ffuf to filter out these false positives, resulting in cleaner, more accurate vulnerability discovery results.