ffuf
Fast web fuzzer for content discovery and input testing.
What it does
ffuf rapidly requests thousands of likely paths, filenames, parameters, and values against your site, watching the responses to reveal hidden directories, forgotten files, undocumented parameters, and inputs that behave unexpectedly.
What data you get
A list of discovered URLs, parameters, and values that produced meaningful responses, with status codes and sizes so real findings stand out from noise.
Why it matters to your site
You can only protect what you know exists. This uncovers the parts of your site — old admin pages, staging files, hidden parameters — that are still reachable but off your radar.
More in this category
Other fuzzers & brute forcers tools
dirsearch
Focused directory and file brute-forcer for web paths.
gobuster
Fast brute-forcer for directories, DNS names, and virtual hosts.
feroxbuster
Recursive content discovery that digs into every folder it finds.