FFUF
root@oco:~$ find / -iname *extension* -type f 2>/dev/null
root@oco:~$ find / -iname directory* -type f 2>/dev/null
EXTENSION FUZZING
root@oco:~$ ffuf -w /opt/useful/seclists/Discovery/Web-Content/web-extensions.txt:FUZZ -u http://{targetSite}:{port}/indexFUZZ
* identify the extension the site uses
PAGE FUZZING
root@oco:~$ ffuf -w /opt/useful/seclists/Discovery/Web-Content/directory-list-2.3-small.txt:FUZZ -u http://{targetSite}:{port}/{directory}/FUZZ.php -t 100 -ic
* the output may list different sizes
- size 0 means no content or empty page
- size > 0 means the page contains content
root@oco:~$ curl {targetSite:port}/sitePage.php
RECURSIVE PAGE FUZZING
this combines the directory fuzzing with page fuzzing
root@oco:~$ ffuf -w /opt/useful/seclists/Discovery/Web-Content/directory-list-2.3-small.txt:FUZZ -u http://{targetSite:port}/FUZZ -recursion -recursion-depth 1 -e .php -v -ic -t 100
* the -recursion flag enables recursive scanning
* the -recursion-depth flag specifies the depth of the recursive scan
- this cmd specifically fuzzes the main directories and their subdirectories
* the -e flag specifies the extension
* the -v flag signifies verbose which outputs the full URL
* the -ic flag removes wordlist comments
Last updated