Attacking Web Apps with Ffuf

Directory Fuzzing

ffuf -u http://10.10.10.5/FUZZ -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt # Basic directory fuzzing

Extension Fuzzing

ffuf -u http://10.10.10.5/indexFUZZ -w extensions.txt # Fuzz file extensions

Parameter Fuzzing

ffuf -u http://10.10.10.5/page?FUZZ=value -w params.txt # Fuzz GET parameters

Subdomain

ffuf -u http://FUZZ.domain.com -w subdomains.txt -H 'Host: FUZZ.domain.com' # Fuzz subdomains (vhost)

Filters

-fc 404    # Filter out 404 responses
-fs 0      # Filter out responses with size 0
-fw 10     # Filter out responses with 10 words