ffuf - Fuzz Faster U Fool

ffuf - Fuzz Faster U Fool

ffuf tool which use to do fuzzing/brute force attacks

Usage: ffuf [flags]

Flags:
  -w             Wordlist file path
  -u             Target URL
  -H             Custom header (can be used multiple times)
  -X             HTTP method (default: GET)
  -r             Follow redirects
  -t             Number of concurrent threads (default: 40)
  -p             Proxy URL
  -c             Custom match string (can be used multiple times)
  -exclude-dirs  Comma-separated list of directories to exclude
  -mc            Maximum number of matches to output
  -v             Verbose output

Examples:

1. Basic usage:

   ffuf -w wordlist.txt -u http://example.com/FUZZ
   

2. Add custom header:

   ffuf -w wordlist.txt -u http://example.com/FUZZ -H "Authorization: Bearer <token>"
   

3. Use POST method:

   ffuf -w wordlist.txt -u http://example.com/api -X POST -d "param1=value1&param2=value2"
   

4. Finding subdomain:

   ffuf -u https://FUZZ.example.com -w wordlist.txt -mc 200,301,302,403
   

5. Follow redirects:

   ffuf -w wordlist.txt -u http://example.com/FUZZ -r
   

6. Use a proxy:

   ffuf -w wordlist.txt -u http://example.com/FUZZ -p http://127.0.0.1:8080
   

7. Exclude directories:

   ffuf -w wordlist.txt -u http://example.com/FUZZ -exclude-dirs "admin,backup,test"
   

8. Use custom match string:

   ffuf -w wordlist.txt -u http://example.com/FUZZ -c "Password incorrect"
   

9. Number of threads:

   ffuf -w wordlist.txt -u http://example.com/FUZZ -t 50
   

Common List for SecLists

https://github.com/danielmiessler/SecLists

List	Usage
SecLists/Discovery/Web-Content/directory-list-2.3-small.txt	Directory/Page Wordlist
SecLists/Discovery/Web-Content/web-extensions.txt	Extensions Wordlist
SecLists/Discovery/DNS/subdomains-top1million-5000.txt	Domain Wordlist
SecLists/Discovery/Web-Content/burp-parameter-names.txt	paramter Wordlist