ffuf

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

1337 Wordlists for Bug Bounty Hunting

The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbitrary binaries and scripts using any of our nine supported cloud providers!

Perfect wordlist for discovering directories and files on target site

automated web assets enumeration & scanning [DEPRECATED]

Golang tool which helps dropping the irrelevant entries from your ffuf result file.

Burp Extension that copies a request and builds a FFUF skeleton

BackupFinder discovers backup files on web servers by generating intelligent patterns.

Describe how to use ffuf different options with examples

[Custom || Automated] Curation & Collection of BugBounty Wordlists

parse ffuf & map endpoints to wordlists

This is the word list for fuzzing kubernetes.

Describe how to use ffuf different options with examples

A command-line tool for parsing and filtering FFUF JSON output files. Quickly search, filter, and analyze your web fuzzing results with color-coded output.

ffuf-GUI is a web-based fuzzing tool inspired by ffuf, designed for penetration testing and security assessments. It provides a user-friendly interface to automate fuzzing tasks directly from a browser, supporting GET, POST, and custom header injections. With real-time results, response filtering, and exportable reports, ffuf-GUI is an efficient to

a simple tool to refine and produce lists for your bugbounty and pen-test engagements

The repository is about the unique and cool stuff that can be used in OSCP preparation for bringing ease to your enumeration steps.

Stop guessing what's hiding on that box. Here's a complete enumeration reference — web, DNS, SMB, OSINT, and beyond. The useful resource that actually gets you to foothold. 🔍 Part of the SudoCode Pentesting Methodology Guide by SudoChef.

Simple enumeration script which utilises different Kali tools