From b012cbe22ade81339abddad606cb415ffa584b0c Mon Sep 17 00:00:00 2001 From: otterbaub <40344103+otterbaub@users.noreply.github.com> Date: Thu, 15 Jul 2021 05:44:28 -0700 Subject: [PATCH] ffuf: add page (#6183) --- pages/linux/ffuf.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 pages/linux/ffuf.md diff --git a/pages/linux/ffuf.md b/pages/linux/ffuf.md new file mode 100644 index 0000000000..7963588818 --- /dev/null +++ b/pages/linux/ffuf.md @@ -0,0 +1,28 @@ +# ffuf + +> Subdomain and directory discovery tool. +> More information: . + +- Discover directories using a [w]ordlist on a target [u]rl with [c]olorized and [v]erbose ouput: + +`ffuf -w {{path/to/wordlist}} -u {{https://target/FUZZ}} -c -v` + +- Fuzz host-[H]eaders with a host file on a traget website and [m]atch HTTP 200 [c]ode responses: + +`ffuf -w {{hosts.txt}} -u {{https://example.org}} -H "{{Host: FUZZ}}" -mc {{200}}` + +- Discover directories using a [w]ordlist on a target website with a max individual job time of 60 seconds and recursion discovery depth of 2 levels: + +`ffuf -w {{path/to/wordlist}} -u {{https://target/FUZZ}} -maxtime-job {{60}} -recursion -recursion-depth {{2}}` + +- Fuzz GET parameter on a target website and [f]ilter out message [s]ize response of 4242 bytes: + +`ffuf -w {{path/to/param_names.txt}} -u {{https://target/script.php?FUZZ=test_value}} -fs {{4242}}` + +- Fuzz POST method with POST [d]ata of password on a target website and [f]ilter out HTTP response [c]ode 401: + +`ffuf -w {{path/to/postdata.txt}} -X {{POST}} -d "{{username=admin\&password=FUZZ}}" -u {{https://target/login.php}} -fc {{401}}` + +- Discover subdomains using a subdoomain list on a target website: + +`ffuf -w {{subdomains.txt}} -u {{https://website.com}} -H "{{Host: FUZZ.website.com}}"`