ffuf

ffuf (Fuzz Faster U Fool) is a fast web fuzzer written in Go. It excels at discovering hidden directories, virtual hosts, GET/POST parameters, and other web resources efficiently. ffuf offers multiple installation methods, including pre-built binaries, package managers (Scoop, Winget, Homebrew), and Go environments. Its core functionality relies on the `FUZZ` keyword to substitute parts of URLs, Headers, or POST data, combined with wordlists for brute-forcing. The tool provides flexible configuration options, supporting recursive scanning, rate limiting, custom matching and filtering rules, and JSON output, making it a powerful assistant for security auditing and penetration testing.

• High-performance concurrent fuzzing
• Flexible URL, Header, POST data fuzzing
• Supports recursive scanning & vhost discovery
• Extensive matching and filtering rules
• Multiple installation methods & JSON output