Ffuf Web Fuzzer

Fuzz web parameters, directories, and endpoints using ffuf.

Tool Status

• Tool installed: !command -v ffuf > /dev/null 2>&1 && echo "YES -- $(ffuf -V 2>&1 | head -1)" || echo "NO -- Install: brew install ffuf (macOS) | go install github.com/ffuf/ffuf/v2@latest"
• Wrapper scripts available: !test -f scripts/ffuf/fuzz-parameters.sh && echo "YES -- use wrapper scripts for structured JSON output" || echo "NO -- using standalone mode with direct commands"

Mode: Wrapper Scripts Available

If wrapper scripts are available (shown as YES above), prefer these commands. They provide structured JSON output and educational context.

Parameter Fuzzing

• bash scripts/ffuf/fuzz-parameters.sh <target> <wordlist> -j -x -- Fuzz URL parameters, headers, and POST data to discover hidden inputs

Learning Mode

• bash scripts/ffuf/examples.sh <target> -- 10 common ffuf patterns with explanations