vim-ale/ffuf

title, homepage, tagline

title	homepage	tagline
ffuf	https://github.com/ffuf/ffuf	Fuzz Faster U Fool: A fast web fuzzer written in Go.

To update or switch versions, run webi ffuf@stable (or @v2, @beta, etc).

Files

These are the files / directories that are created and/or modified with this install:

~/.config/envman/PATH.env
~/.local/bin/ffuf

Cheat Sheet

ffuf is a powerful web fuzzer written in Go. With a range of functionalities and fast performance, it's a must-have tool for penetration testers and security researchers.

To run ffuf:

ffuf -w /path/to/wordlist -u https://target/FUZZ

Content Discovery with ffuf

For typical directory discovery:

ffuf -w /path/to/wordlist -u https://target/FUZZ

Virtual Host Discovery (without DNS records)

Assuming a default virtualhost response size:

ffuf -w /path/to/vhost/wordlist -u https://target -H "Host: FUZZ" -fs 4242

GET Parameter Fuzzing

For fuzzing GET parameter names:

ffuf -w /path/to/paramnames.txt -u https://target/script.php?FUZZ=test_value -fs 4242

And many other functionalities. Visit ffuf's official documentation for a comprehensive guide.