> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/fuzzing/ffuf.md).

# ffuf

Fuzz Faster U Fool

```
sudo git clone https://github.com/ffuf/ffuf ; cd ffuf ; go get ; go build

#Usage

ffuf -w /path/to/wordlist -u https://target/FUZZ


ffuf -u https://FUZZ.example.com -w wordlist.txt -mc 200,301,302,403 (Match status code)

ffuf -u https://example.com/FUZZ -w wordlist.txt -recursion (search recursively)

ffuf -u https://example.com/Fuzz -w wordlist.txt -e .bak,.zip (Fuzz extensions)

ffuf -w raft-large-files.txt -u 'https://test.com/?lang=FUZZ' -mc 200 -fs 74763 

(filter out file size of 74763, check what majority response you get and filter out)

```

```
ffuf -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-big.txt -u 'https://example.com/?secure_scheme=true/FUZZ' -fc 400,401,402,403,404,429,500,501,502,503 -recursion -recursion-depth 2 -e .html,.php,.txt,.pdf,.js,.css,.zip,.bak,.old,.log,.json,.xml,.config,.env,.asp,.aspx,.jsp,.gz,.tar,.sql,.db -ac -c -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0" -H "X-Forwarded-For: 127.0.0.1" -H "X-Originating-IP: 127.0.0.1" -H "X-Forwarded-Host: localhost" -t 100 -r 
```