← All tools

ffuf

Web Fuzzer · Intermediate

Fast web fuzzer for content discovery and parameter testing.

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • FUZZ keyword
  • Filters (-fc, -fs)
  • Rate limiting (-rate)

Legitimate use

ffuf is used legitimately by security teams for authorized testing, defense validation and education.

Official docs →

Example commands (lab VMs only)

  • ffuf -u http://localhost:3000/FUZZ -w common.txt
    Fuzz paths on a local lab app