ffuf-web-fuzzing - Guide web fuzzing with ffuf
Provides guidance for content discovery, parameter and subdomain fuzzing, authenticated requests, calibration, filtering, and result analysis with ffuf.
Tags
Updated: 2026-10-03Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Fuzz web paths and files
- Enumerate subdomains and virtual hosts
- Fuzz parameters and request bodies
- Fuzz headers and authenticated requests
- Apply matchers and response filters
- Use auto-calibration to reduce noise
- Control request rate and concurrency
- Export results in multiple formats
- Analyze ffuf scan results
Inputs
- Target URLs
- Wordlists
- Raw HTTP request files
- Authentication headers and cookies
- Payload files
- Proxy endpoints
- Match and filter criteria
- Rate and timing limits
Outputs
- Terminal scan findings
- JSON, HTML, or CSV result files
- Filtered matching responses
- Scan execution status
Requirements
- ffuf command-line tool
- Network access to targets
- Authorized security-testing scope
