Back: Catalog

FFUF

Go is a web fuzzer tool developed with programming language. Using the FUZZ keyword in URL structures, it enables content discovery, virtual server detection, and parameter scanning.

FF

FFUF

92

ffuf · Security & Penetration Testing

STARS17.0K
FORKS1.6K
COMMITS—
CONTRIBUTORS51
VERSIONv2.2.1
UPDATED1 mo ago
GoFuzzingWeb SecurityMIT

Common commercial products in this category: Burp Suite Professional, Nessus, Cobalt Strike

What can it do?
  • You can make a typical directory discovery on the target website.
  • You can perform virtual server (vhost) detection without the need for DNS recordings.
  • You can apply fuzzing operation on the GET parameters.
User reviews
  • • NeutralGitHub Issue

    recursion not working properly

    “Hello, even with -recursion enabled, and -recursion-depth of 3 ... and im using FUZZ at the end of both the URL and the wordlist ... I am able to locate directories but new jobs are not added for the recursion process. So - i have to re-run ffuf and manually scan those new…”

  • ↓ NegativeGitHub Issue

    How to get back the 1 line verbosity like v1.5

    “Now it takes 3 lines for 1 result which to me is quite frustrating ![image](”

GitHub

My note

Alternative pages

Burp Suite Professional alternativesNessus alternativesCobalt Strike alternatives

More in: Security & Penetration Testing