ffuf
InformationalFuzz Faster U Fool
Definition
ffuf (Fuzz Faster U Fool) is an ultra-fast web fuzzing tool written in Go. It lets you discover directories, files, subdomains, parameters and hidden values in web applications using wordlists. Its speed, flexibility and filtering capabilities make it the fuzzing tool of choice for the bug bounty community.
Impact
Discovering hidden directories and filesEnumerating subdomains through DNS fuzzingDiscovering hidden GET/POST parametersFuzzing values to find IDORs and authentication bypassesDetecting undocumented API endpoints
Examples
Essential ffuf commands
ffuf replaces the word FUZZ in the URL, headers or body with each wordlist entry. The filters (-mc for status code, -fs for size, -fw for words) let you remove false positives and find only relevant results.
# Directory fuzzing
ffuf -u https://example.com/FUZZ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt
# Filter by status code and size
ffuf -u https://example.com/FUZZ -w wordlist.txt -mc 200,301 -fs 1234
# Subdomain fuzzing
ffuf -u https://FUZZ.example.com -w subdomains.txt -mc 200
# Parameter fuzzing
ffuf -u https://example.com/api?FUZZ=test -w params.txt -fs 0
# POST fuzzing with JSON
ffuf -u https://example.com/api/login -X POST -H "Content-Type: application/json" \
-d '{"user":"admin","password":"FUZZ"}' -w passwords.txt