domains / families / security / ffuf-web-fuzzing

ffuf-web-fuzzing

authentic

Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis

When to use

• You are fuzzing web targets with `ffuf` during authorized security testing or penetration testing.
• The task involves content discovery, subdomain enumeration, parameter fuzzing, or authenticated request fuzzing.
• You need guidance on wordlists, filtering, calibration, and interpreting ffuf results efficiently.

When not to use

• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Skill page

Source