Thread by @ReconOne_bk

ffuf is used by hundreds of people

But only a few use the tool effectively.

Here are 9 tips you want to know right away 👇 🧵

#bugbountytips #bugbounty #recon #ffuf

1/9 Standard mode

c: color
ac: auto calibration
r: follow redirects

$ ffuf -u https://ups[.]com/FUZZ -w ~/wordlists/common.txt -r

$ ffuf -c -u https://ups[.]com/FUZZ -w ~/wordlists/common.txt -ac

2/9 Throttle Speed

t: threads
p: seconds of delay between requests (or range e.g. 0.1-1)

$ ffuf -u https://ups[].com/FUZZ -t 20 -p 0.2 -w ~/wordlists/common.txt

3/9 How to enable Dirsearch Mode

D: dirsearch mode
e: extension (for dirsearch wordlist)

$ ffuf -u https://ups[].com/FUZZ -D -e php -w ~/wordlists/dirsearch_wordlist.txt

4/9 Not only files or directories

H: header

$ ffuf -u https://ups[].com/ -H “Host: FUZZ” -w ~/wordlists/common_host.txt

$ ffuf -u https://ups[].com/ -H “X-Forwarded-For: FUZZ” -w ~/wordlists/bypass403.txt -ac

5/9 Not olny GET

X: HTTP method
d: body data

$ ffuf -u https://ups[].com/FUZZ -X POST -w ~/wordlists/passwords.txt -d ‘user=admin&password=FUZZ’

6/9 ffuf Output

o: output

$ ffuf -u https://ups[].com/FUZZ -w ~/wordlists/common.txt -o ffuf_report.txt (Default json)

$ ffuf -u https://ups[].com/FUZZ -w ~/wordlists/common.txt -o ffuf_report.csv -of csv

7/9 Work with your Burp Proxy

x: proxy

$ ffuf -u https://ups[].com/FUZZ -w ~/wordlists/common.txt -x http://127.0.0.1:8080

8/9 Useful Filters

fs: filter size
fc: filter HTTP status code

$ ffuf -u https://ups[].com/FUZZ -w ~/wordlists/common.txt -fs 1080

$ ffuf -u https://ups[].com/FUZZ -w ~/wordlists/common.txt -fc 302,403

9/9 Useful Matchers

mc: match HTTP status code
ml: response lines

$ ffuf -u https://ups[].com/FUZZ -w ~/wordlists/ddos.txt -mc 500

$ ffuf -u https://ups[].com/FUZZ -w ~/wordlists/ddos.txt -ml 729

If you start using them, I guarantee you’ll unlock the full power of ffuf

Enjoy this post? Follow me @ReconOne_bk for more writing on Bug Bounty, Recon and Attack Surface Management.

https://twitter.com/ReconOne_bk/status/1571803971030761473?t=-6sP1h__KGgAYuj0Gs1exw&s=19