> For the complete documentation index, see [llms.txt](https://notes.programmersecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.programmersecurity.com/web-pentesting-stuff/pentesting-port-80-443/ffuf-commands.md).

# FFUF Commands

## FFUF for Dir and Files

```python
ffuf -u http://10.10.110.62:8080/FUZZ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -c -e php,txt,html 
```

## FFUF for vhost Scanning

We can use FFUF to Scan for the Virtual Hosts, i am using **names.txt** from seclists

```python
ffuf -u http://inlanefreight.htb -H "HOST: FUZZ.inlanefreight.htb" -w /usr/share/seclists/Discovery/DNS/namelist.txt
```

i have used filtering as well because i was getting 10918 and 0 size on every vhost so i filtered them

<figure><img src="/files/T9y028S032Nfw48yMyPb" alt=""><figcaption></figcaption></figure>

## FFUF using BurpSuite Request File

if you want to do some fuzzing in a BurpSuite Request, then you can  you can add the request in a file and pass the file to FFUF, just like we do with sqlmap

```javascript
ffuf -request ffuf-request -w /usr/share/seclists/Usernames/xato-net-10-million-usernames-dup.txt -request-proto http
```

i have used **-fs 781** because i wanted to filter size 781

<figure><img src="/files/ClbJoKswCosUuxUuwz7L" alt=""><figcaption></figcaption></figure>