📝 Notes🔒 SecurityBusterWebFfuf

[Web] ffuf

Better wfuzz

Basic usage

Buste a file / dir

ffuf -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -u https://target/FUZZ

Buste a Query

ffuf -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -u https://target/script.php?FUZZ=test_value

Buste a Query

ffuf -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -u https://target/script.php?FUZZ=test_value

Buste a POST data

  • -fc: filtering out the 401 responses
ffuf -w /path/to/postdata.txt -X POST -d "username=admin\&password=FUZZ" -u https://target/login.php -fc 401

Buste a POST JSON data

-w: word list path -X: HTTP Method -H: Headers -d: Data -fr: Match all responses not containing text “error”

ffuf -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -u https://example.org/ -X POST -H "Content-Type: application/json" -d '{"name": "FUZZ", "anotherkey": "anothervalue"}' -fr "error"
HydraGobuster