> For the complete documentation index, see [llms.txt](https://notes.programmersecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.programmersecurity.com/web-pentesting-stuff/pentesting-port-80-443/ffuf-commands.md).
# FFUF Commands
## FFUF for Dir and Files
```python
ffuf -u http://10.10.110.62:8080/FUZZ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -c -e php,txt,html
```
## FFUF for vhost Scanning
We can use FFUF to Scan for the Virtual Hosts, i am using **names.txt** from seclists
```python
ffuf -u http://inlanefreight.htb -H "HOST: FUZZ.inlanefreight.htb" -w /usr/share/seclists/Discovery/DNS/namelist.txt
```
i have used filtering as well because i was getting 10918 and 0 size on every vhost so i filtered them
## FFUF using BurpSuite Request File
if you want to do some fuzzing in a BurpSuite Request, then you can you can add the request in a file and pass the file to FFUF, just like we do with sqlmap
```javascript
ffuf -request ffuf-request -w /usr/share/seclists/Usernames/xato-net-10-million-usernames-dup.txt -request-proto http
```
i have used **-fs 781** because i wanted to filter size 781
