Skip to content

Web Fuzzing

Ffuf, GoBuster, FeroxBuster

Directory Fuzzing

  • ffuf -w /opt/seclists/Discovery/Web-Content/directory-list-2.3-small.txt:FUZZ -u http://server:port/FUZZ
  • gobuster dir -u http://server:port -w /opt/SecLists/Discovery/Web-Content/directory-list-2.3-small.txt

Page Fuzzing

  • ffuf -w /opt/SecLists/Discovery/Web-Content/web-extensions.txt:FUZZ -u http://SERVER_IP:PORT/blog/indexFUZZ
  • gobuster dir -u http://94.237.59.174:35919/blog/ -w /opt/SecLists/Discovery/Web-Content/directory-list-2.3-small.txt -x asp,aspx,php

Recursive Fuzzing

  • ffuf -w /opt/SecLists/Discovery/Web-Content/directory-list-2.3-small.txt:FUZZ -u http://SERVER_IP:PORT/FUZZ -recursion -recursion-depth 1 -e .php -v
    • -recursion-depth 1 - will go into directory and subdirectory only once.
    • -e .php : extension
  • feroxbuster --url http://94.237.60.55:32812 --depth 2 --wordlist /opt/SecLists/Discovery/Web-Content/directory-list-2.3-small.txt --extensions php,aspx

Filtering

  • If seeing multiple responses that seem to be FP.
  • use -fs 985 along with the ffuf command
    • 985 being the length of the FP response.