Command-line tool

ffuf

brew/ffuf

Checked 25 Oct 2026, 21:09 UTC · Listing refreshed from Homebrew, winget, npm, Scoop and cargo; npm packages checked against OSV.dev

Fast web fuzzer written in Go web pentesting fuzzer infosec

Website Source

At a glance

Type

Command-line tool

Install on

Windows, macOS, Linux

Last checked

25 Oct 2026, 21:09 UTC

Install it

Windows

winget install --id ffuf.ffuf -e
scoop install ffuf

macOS

brew install ffuf

Linux

brew install ffuf

Enumerate directories using [c]olored output and a [w]ordlist specifying a target [u]RL

ffuf -c -w path/to/wordlist.txt -u https://example.com/FUZZ

Enumerate webservers of subdomains by changing the position of the keyword

ffuf -w path/to/subdomains.txt -u https://FUZZ.example.com

Fuzz with specified [t]hreads (default: 40) and pro[x]ying the traffic and save [o]utput to a file

ffuf -o -w path/to/wordlist.txt -u https://example.com/FUZZ -t 500 -x http://127.0.0.1:8080

Related command-line tools

• lonkero
  Web scanner built for actual pentests. Fast, modular, Rust.
• feroxbuster
  Fast, simple, recursive content discovery tool written in Rust rust web hacktoberfest enumeration content-discovery…
• echidna
  Ethereum smart contract fuzzer
• zzuf
  Transparent application input fuzzer
• radamsa
  Test case generator for robustness testing (a.k.a. a "fuzzer")
• wuppiefuzz
  Coverage-guided REST API fuzzer developed on top of LibAFL
• fast-socks5
  Fast SOCKS5 client/server implementation written in Rust async/.await (tokio)
• reacher-fast-socks5
  Fast SOCKS5 client/server implementation written in Rust async/.await (tokio)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents