Tools

ffuf — Web Fuzzing

Hidden admin panels, forgotten backup files, undocumented API routes, and ghost subdomains — ffuf finds them by sending thousands of requests per second with wordlist-driven payloads.

Beginner30 min5 lessons1 hands-on

Start free →I have an account

First lesson free. The full module is part of Pro.

You'll be able to

✓Fuzz URL paths, parameters, subdomains, and headers with ffuf
✓Filter and match results by status code, size, and response word count
✓Build effective wordlist + filter combinations for clean output
✓Use ffuf in recon pipelines alongside other enumeration tools

Lessons

1What Is ffuf and How It Works
2Filtering and Tuning — Cutting Through Noise
3Advanced Fuzzing — Vhosts, Parameters, POST Bodies, and Recursion
4Your Turn: Fuzz for Hidden PathsHANDS-ON
5Lab — Read ffuf Output + Concept Review

Start free →