Keyword: FFUF - Web Fuzzer

[YiMeng]

Description

• Integration with "ffuf - Fuzz Faster U Fool - https://github.com/ffuf/ffuf"

Usages

• FFUF "PRE-DEFINED MODE" WORDLISTPath URL

• FFUF "'CMD' AS PRE-DEFINED MODE" (FOLLOW BY FFUF COMMAND SYNTAX)
  • FFUF CMD -w @@__meta\wordlist.txt -u http://example.com/FUZZ

• SHELL $$ffuf\FFUF.exe -w @@__meta\wordlist.txt -u http://example.com/FUZZ >> @@__meta\output.TXT

Pre-defined Modes

• PATH: FFUF PATH wordlistPath http://example.com/FUZZ

• POST: FFUF POST wordlistPath http://example.com/FUZZ varName=FUZZ

• FOLLOW: FFUF FOLLOW wordlistPath http://example.com/FUZZ

• XSS: FFUF XSS wordlistPath http://example.com/FUZZ
  • <scr<script>ipt>alert('XSS')</script>
  • '"><img src=x onerror=alert(1)>
  • "><svg/onload=alert(1)>

• XXE: FFUF XXE wordlistPath http://example.com/FUZZ
  • file:///etc/passwd
  • file:///c:/windows/win.ini

• HEADER: FFUF HEADER wordlistPath http://example.com/FUZZ

FOR ALL OTHER FFUF SYNTAX NOT DEFINED IN PRE-DEFINED MODE, USE CMD MODE OR USE THE 'SHELL' KEYWORD

• EX: SHELL $$ffuf\FFUF.exe -w @@__meta\wordlist.txt -u http://example.com/FUZZ >> @@__meta\output.TXT