> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/fuzzing.md).

# Fuzzing

- [wfuzz](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/fuzzing/wfuzz.md): sudo apt install wfuzz
- [ffuf](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/fuzzing/ffuf.md): Fuzz Faster U Fool
- [Fuzzing Wordlists](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/fuzzing/fuzzing-wordlists.md)
- [Fuzzuli (fuzz backup files)](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/fuzzing/fuzzuli-fuzz-backup-files.md): fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.
- [find hidden directories](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/fuzzing/find-hidden-directories.md): with dirsearch
- [Headers Fuzzing (headerpwn)](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/fuzzing/headers-fuzzing-headerpwn.md): A fuzzer for analyzing how servers respond to different HTTP headers.