Agent skill · security · aiskillstore
dast-ffuf
Fast web fuzzer for DAST testing with directory enumeration, parameter fuzzing, and virtual host discovery. Written in Go for high-performance HTTP fuzzing with extensive filtering capabilities. Supports multiple fuzzing modes (clusterbomb, pitchfork, sniper) and recursive scanning. Use when: (1) Discovering hidden directories, files, and endpoints on web applications, (2) Fuzzing GET and POST parameters to identify injection vulnerabilities, (3) Enumerating virtual hosts and subdomains, (4) Testing authentication endpoints with credential fuzzing, (5) Finding backup files and sensitive data exposures, (6) Performing comprehensive web application reconnaissance.
Why this skill is useful
Provides specific commands and workflows for using ffuf in DAST testing that are not commonly known.
What it needs
Requires ffuf installed locally. About 7k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
ffuf - Fast Web Fuzzer Overview ffuf is a fast web fuzzer written in Go designed for discovering hidden resources, testing parameters, and performing comprehensive web application reconnaissance. It uses the FUZZ keyword as a placeholder for wordlist entries and supports advanced filtering, multiple fuzzing modes, and recursive scanning for thorough security assessments. Installation Quick Start Basic directory fuzzing: Core Workflows Workflow 1: Directory and File Enumeration For discovering hidden resources on web applications: 1. Start with common directory wordlist: 2. Review discovered directories (focus on 200, 403 status codes) 3. Enumerate files in discovered directories: 4. Use recursive mode for deep enumeration: 5. Document findings and test discovered endpoints Workflow 2: Parameter Fuzzing (GET/POST) Progress: [ ] 1. Identify target endpoint for parameter testing [ ] 2. Fuzz GET parameter names to discover hidden parameters [ ] 3. Fuzz parameter values for injection vulnerabilities [ ] 4. Test POST parameters with JSON/form data [ ] 5. Apply appropriate filters to reduce false positives [ ] 6. Analyze responses for anomalies and vulnerabilities [ ] 7. Validate findings manually [ ] 8. Document vulnerable parameters and payloads Work through each step systematically. Check off completed items. GET Parameter Name Fuzzing: GET Parameter Value Fuzzing: POST Data Fuzzing: Workflow 3: Virtual Host and Subdomain Discovery For identifying virtual hosts and subdomains: 1. Prepare subdomain wordlist (or use SecLists) 2. Run vhost fuzzing: 3. Filter results by comparing response sizes/words 4. Verify discovered vhosts manually 5. Enumerate directories on each vhost 6. Document vhost configurations and exposed services Workflow 4: Authentication Endpoint Fuzzing For testing login forms and authentication mechanisms: 1. Identify authentication endpoint 2. Fuzz usernames: 3. For identified users, fuzz passwords: 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/dast-ffuf