Ffuf

Purpose

Use this skill when the methodology calls for controlled discovery of hidden web paths or API routes.

Phase Fit

• Primary: Discovery and Reconnaissance, Vulnerability Analysis
• Secondary: Validation and Controlled Impact Demonstration, Retest and Closure

Use When

• Need to discover content paths, API routes, or administrative endpoints.
• Need to validate whether exposed functionality is broader than the visible application map.
• Need to retest whether sensitive routes were removed or protected.

Avoid When