ffuf Directory & Vhost Brute-Force

2026-08-06 bash ffuf web-exploitation

Content discovery with ffuf — directory fuzzing plus a vhost variant that filters on response size.

bash

# directory / file discovery
ffuf -u http://<target-ip>/FUZZ \
  -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt \
  -mc 200,204,301,302,307,401,403 -o ffuf-dirs.json

# virtual-host discovery — filter out the default page by size (-fs)
ffuf -u http://<target-ip>/ -H "Host: FUZZ.<domain>" \
  -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt \
  -fs <default-response-size>