mirror of
https://github.com/webinstall/webi-installers.git
synced 2026-04-06 18:36:50 +00:00
23100394ac
Renames: - github_repo → github_releases (back-compat kept) - github_source → github_sources (back-compat kept) - gitea_repo → gitea_releases (back-compat kept) New keys: - gitea_sources, gitlab_releases, gitlab_sources All keys now accept either owner/repo shorthand or full URLs: - github_releases = sharkdp/bat - github_releases = https://github.com/sharkdp/bat - gitea_releases = https://git.rootprojects.org/root/pathman Defaults: github → github.com, gitlab → gitlab.com. Gitea has no default (self-hosted only). Updated all 73 releases.conf files from github_repo to github_releases.
title, homepage, tagline
| title | homepage | tagline |
|---|---|---|
| ffuf | https://github.com/ffuf/ffuf | Fuzz Faster U Fool: A fast web fuzzer written in Go. |
To update or switch versions, run webi ffuf@stable (or @v2, @beta, etc).
Files
These are the files / directories that are created and/or modified with this install:
~/.config/envman/PATH.env
~/.local/bin/ffuf
Cheat Sheet
ffufis a powerful web fuzzer written in Go. With a range of functionalities and fast performance, it's a must-have tool for penetration testers and security researchers.
Rotate through wordlists to discover and report exposed URLs, domains, etc.
# fuff -w <list>[:VAR] -u 'https://<target>/<VAR>'
fuff -w ./fuzz-Bo0oM.txt -u 'https://ffuf.io.fi/FUZZ
fuff \
-w ./fuzz-Bo0oM.txt:'FUZZ_PATH' \
-w ./subdomains-top1million-5000.txt:'FUZZ_SUB' \
-u 'https://FUZZ_SUB.ffuf.io.fi/FUZZ_PATH'
How to get ffuf wordlists
| Download | Source | Desc |
|---|---|---|
| onelistforallmicro.txt | OneListForAll | Words, Paths, Files |
| fuzz-Bo0oM.txt | SecLists/Fuzzing | Words, Paths, Files |
| subdomains-top1million-5000.txt | SecLists/.../DNS | Common Subdomains |
| burp-parameter-names.txt | SecLists/.../Web-Content | HTTP Query Params |
| urls-wordpress-3.3.1.txt | SecLists/.../URLs | WordPress v3 Paths |
These were pulled from the resources mentioned in ffuf wiki: Wordlistt Resources:
How to Discover Exposed Content
For typical directory discovery:
ffuf -w ./onelistforallmicro.txt:'FUZZ' -u https://example.com/FUZZ
How to check for Domain Fronting (VHost Discovery)
Assuming a default virtualhost response size:
ffuf \
-w ./subdomains-top1million-5000.txt:'SUB' \
-u https://example.com \
-H "Host: SUB.example.com" \
-fs 4242
How to Fuzz GET Parameters
For fuzzing GET parameter names:
ffuf \
-w ./burp-parameter-names.txt:'KEY' \
-u https://example.com/script.php?KEY=test_value \
-fs 4242