00 — Overview
ffuf — Web Fuzzing
Hidden admin panels, forgotten backup files, undocumented API routes, and ghost subdomains — ffuf finds them by sending thousands of requests per second with wordlist-driven payloads.
Beginner·30 min·4 tasks
// By the end of this module
→Fuzz URL paths, parameters, subdomains, and headers with ffuf
→Filter and match results by status code, size, and response word count
→Build effective wordlist + filter combinations for clean output
→Use ffuf in recon pipelines alongside other enumeration tools