From 7b99e79793855e058b104a10054afff0a3bd97d8 Mon Sep 17 00:00:00 2001 From: Managor <42655600+Managor@users.noreply.github.com> Date: Sun, 11 May 2025 08:45:02 +0300 Subject: [PATCH] ffuf: use example.com (#16456) * Update ffuf.md * Update pages/common/ffuf.md Co-authored-by: Fazle Arefin * Update pages/common/ffuf.md Co-authored-by: Fazle Arefin * Update pages/common/ffuf.md Co-authored-by: Fazle Arefin --------- Co-authored-by: Machiavelli <145562237+MachiavelliII@users.noreply.github.com> Co-authored-by: Fazle Arefin --- pages/common/ffuf.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/pages/common/ffuf.md b/pages/common/ffuf.md index cd820fe747..f45ce99f30 100644 --- a/pages/common/ffuf.md +++ b/pages/common/ffuf.md @@ -6,28 +6,28 @@ - Enumerate directories using [c]olored output and a [w]ordlist specifying a target [u]RL: -`ffuf -c -w {{path/to/wordlist.txt}} -u {{http://target/FUZZ}}` +`ffuf -c -w {{path/to/wordlist.txt}} -u {{http://example.com/FUZZ}}` - Enumerate webservers of subdomains by changing the position of the keyword: -`ffuf -w {{path/to/subdomains.txt}} -u {{http://FUZZ.target.com}}` +`ffuf -w {{path/to/subdomains.txt}} -u {{http://FUZZ.example.com}}` - Fuzz with specified [t]hreads (default: 40) and pro[x]ying the traffic and save [o]utput to a file: -`ffuf -o -w {{path/to/wordlist.txt}} -u {{http://target/FUZZ}} -t {{500}} -x {{http://127.0.0.1:8080}}` +`ffuf -o -w {{path/to/wordlist.txt}} -u {{http://example.com/FUZZ}} -t {{500}} -x {{http://127.0.0.1:8080}}` - Fuzz a specific [H]eader ("Name: Value") and [m]atch HTTP status [c]odes: -`ffuf -w {{path/to/wordlist.txt}} -u {{http://target.com}} -H "{{Host: FUZZ}}" -mc {{200}}` +`ffuf -w {{path/to/wordlist.txt}} -u {{http://example.com}} -H "{{Host: FUZZ}}" -mc {{200}}` - Fuzz with specified HTTP method and [d]ata, while [f]iltering out comma separated status [c]odes: -`ffuf -w {{path/to/postdata.txt}} -X {{POST}} -d "{{username=admin\&password=FUZZ}}" -u {{http://target/login.php}} -fc {{401,403}}` +`ffuf -w {{path/to/postdata.txt}} -X {{POST}} -d "{{username=admin\&password=FUZZ}}" -u {{http://example.com/login.php}} -fc {{401,403}}` - Fuzz multiple positions with multiple wordlists using different modes: -`ffuf -w {{path/to/keys:KEY}} -w {{path/to/values:VALUE}} -mode {{pitchfork|clusterbomb}} -u {{http://target.com/id?KEY=VALUE}}` +`ffuf -w {{path/to/keys:KEY}} -w {{path/to/values:VALUE}} -mode {{pitchfork|clusterbomb}} -u {{http://example.com/id?KEY=VALUE}}` - Proxy requests through a HTTP MITM pro[x]y (such as Burp Suite or `mitmproxy`): -`ffuf -w {{path/to/wordlist}} -x {{http://127.0.0.1:8080}} -u {{http://target.com/FUZZ}}` +`ffuf -w {{path/to/wordlist}} -x {{http://127.0.0.1:8080}} -u {{http://example.com/FUZZ}}`