lilith/tldr
1
0
Fork 0
mirror of https://github.com/tldr-pages/tldr.git synced 2025-08-04 00:55:33 +02:00
Code Activity

ffuf: use example.com (#16456)

Browse source 
* Update ffuf.md

* Update pages/common/ffuf.md

Co-authored-by: Fazle Arefin <fazlearefin@users.noreply.github.com>

* Update pages/common/ffuf.md

Co-authored-by: Fazle Arefin <fazlearefin@users.noreply.github.com>

* Update pages/common/ffuf.md

Co-authored-by: Fazle Arefin <fazlearefin@users.noreply.github.com>

---------

Co-authored-by: Machiavelli <145562237+MachiavelliII@users.noreply.github.com>
Co-authored-by: Fazle Arefin <fazlearefin@users.noreply.github.com>
This commit is contained in:
Managor 2025-05-11 08:45:02 +03:00 • committed by GitHub
parent 412c08af15
commit 7b99e79793
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
pages/common/ffuf.md
View file

@ -6,28 +6,28 @@
- Enumerate directories using [c]olored output and a [w]ordlist specifying a target [u]RL:
`ffuf -c -w {{path/to/wordlist.txt}} -u {{http://target/FUZZ}}`
`ffuf -c -w {{path/to/wordlist.txt}} -u {{http://example.com/FUZZ}}`
- Enumerate webservers of subdomains by changing the position of the keyword:
`ffuf -w {{path/to/subdomains.txt}} -u {{http://FUZZ.target.com}}`
`ffuf -w {{path/to/subdomains.txt}} -u {{http://FUZZ.example.com}}`
- Fuzz with specified [t]hreads (default: 40) and pro[x]ying the traffic and save [o]utput to a file:
`ffuf -o -w {{path/to/wordlist.txt}} -u {{http://target/FUZZ}} -t {{500}} -x {{http://127.0.0.1:8080}}`
`ffuf -o -w {{path/to/wordlist.txt}} -u {{http://example.com/FUZZ}} -t {{500}} -x {{http://127.0.0.1:8080}}`
- Fuzz a specific [H]eader ("Name: Value") and [m]atch HTTP status [c]odes:
`ffuf -w {{path/to/wordlist.txt}} -u {{http://target.com}} -H "{{Host: FUZZ}}" -mc {{200}}`
`ffuf -w {{path/to/wordlist.txt}} -u {{http://example.com}} -H "{{Host: FUZZ}}" -mc {{200}}`
- Fuzz with specified HTTP method and [d]ata, while [f]iltering out comma separated status [c]odes:
`ffuf -w {{path/to/postdata.txt}} -X {{POST}} -d "{{username=admin\&password=FUZZ}}" -u {{http://target/login.php}} -fc {{401,403}}`
`ffuf -w {{path/to/postdata.txt}} -X {{POST}} -d "{{username=admin\&password=FUZZ}}" -u {{http://example.com/login.php}} -fc {{401,403}}`
- Fuzz multiple positions with multiple wordlists using different modes:
`ffuf -w {{path/to/keys:KEY}} -w {{path/to/values:VALUE}} -mode {{pitchfork|clusterbomb}} -u {{http://target.com/id?KEY=VALUE}}`
`ffuf -w {{path/to/keys:KEY}} -w {{path/to/values:VALUE}} -mode {{pitchfork|clusterbomb}} -u {{http://example.com/id?KEY=VALUE}}`
- Proxy requests through a HTTP MITM pro[x]y (such as Burp Suite or `mitmproxy`):
`ffuf -w {{path/to/wordlist}} -x {{http://127.0.0.1:8080}} -u {{http://target.com/FUZZ}}`
`ffuf -w {{path/to/wordlist}} -x {{http://127.0.0.1:8080}} -u {{http://example.com/FUZZ}}`