FFUF Commands

FFUF for Dir and Files

ffuf -u http://10.10.110.62:8080/FUZZ -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -c -e php,txt,html 

FFUF for vhost Scanning

We can use FFUF to Scan for the Virtual Hosts, i am using names.txt from seclists

ffuf -u http://inlanefreight.htb -H "HOST: FUZZ.inlanefreight.htb" -w /usr/share/seclists/Discovery/DNS/namelist.txt

i have used filtering as well because i was getting 10918 and 0 size on every vhost so i filtered them

FFUF using BurpSuite Request File

if you want to do some fuzzing in a BurpSuite Request, then you can you can add the request in a file and pass the file to FFUF, just like we do with sqlmap

ffuf -request ffuf-request -w /usr/share/seclists/Usernames/xato-net-10-million-usernames-dup.txt -request-proto http

i have used -fs 781 because i wanted to filter size 781