FFUF (Fuzz Faster U Fool) Skill
Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis
When to Use
- You are fuzzing web targets with
ffuf during authorized security testing or penetration testing.
- The task involves content discovery, subdomain enumeration, parameter fuzzing, or authenticated request fuzzing.
- You need guidance on wordlists, filtering, calibration, and interpreting ffuf results efficiently.
Core Workflow
- Confirm the request matches this skill's trigger, scope, and risk profile.
- Use the topic map to identify the relevant pattern, checklist, or example before writing detailed guidance or code.
- Load
references/full-guidance.md when implementation details, examples, anti-patterns, validation checks, or edge cases are needed.
- Apply only the relevant guidance instead of loading or repeating the entire reference by default.
- Verify the result against any validation checks, limitations, security notes, or platform constraints in the reference.
Topic Map
- Overview
- Installation
- Core Concepts
- The FUZZ Keyword
- Multi-wordlist Modes
- Common Use Cases
- Directory and File Discovery
- Subdomain Enumeration
- Parameter Fuzzing
- POST Data Fuzzing
- Header Fuzzing
- Filtering and Matching
- Matchers (Include Results)
- Filters (Exclude Results)
- Auto-Calibration (USE BY DEFAULT!)
- Rate Limiting and Timing
- Rate Control
- Time Limits
Reference Map
references/full-guidance.md preserves the complete original guidance, including examples and detailed edge cases.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
Progressive Loading
Keep this SKILL.md as the compact routing and workflow entrypoint. Load the reference file only when the user task requires the deeper implementation material.
1---2name: ffuf-web-fuzzing3description: Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis4license: MIT5---67# FFUF (Fuzz Faster U Fool) Skill89Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis1011## When to Use12- You are fuzzing web targets with `ffuf` during authorized security testing or penetration testing.13- The task involves content discovery, subdomain enumeration, parameter fuzzing, or authenticated request fuzzing.14- You need guidance on wordlists, filtering, calibration, and interpreting ffuf results efficiently.1516## Core Workflow171. Confirm the request matches this skill's trigger, scope, and risk profile.182. Use the topic map to identify the relevant pattern, checklist, or example before writing detailed guidance or code.193. Load `references/full-guidance.md` when implementation details, examples, anti-patterns, validation checks, or edge cases are needed.204. Apply only the relevant guidance instead of loading or repeating the entire reference by default.215. Verify the result against any validation checks, limitations, security notes, or platform constraints in the reference.2223## Topic Map24- Overview25- Installation26- Core Concepts27- The FUZZ Keyword28- Multi-wordlist Modes29- Common Use Cases30- Directory and File Discovery31- Subdomain Enumeration32- Parameter Fuzzing33- POST Data Fuzzing34- Header Fuzzing35- Filtering and Matching36- Matchers (Include Results)37- Filters (Exclude Results)38- Auto-Calibration (USE BY DEFAULT!)39- Rate Limiting and Timing40- Rate Control41- Time Limits4243## Reference Map44- `references/full-guidance.md` preserves the complete original guidance, including examples and detailed edge cases.4546## Limitations47- Use this skill only when the task clearly matches the scope described above.48- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.49- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.5051## Progressive Loading52Keep this `SKILL.md` as the compact routing and workflow entrypoint. Load the reference file only when the user task requires the deeper implementation material.
newmindsgroup