ffuf-web-fuzzing

SKILL.md

Overview FFUF is a fast web fuzzer written in Go, designed for discovering hidden content, directories, files, subdomains, and testing for vulnerabilities during penetration testing. It's significantly faster than traditional tools like dirb or dirbuster.

The FUZZ Keyword The FUZZ keyword is used as a placeholder that gets replaced with entries from your wordlist. You can place it anywhere:

Auto-Calibration (USE BY DEFAULT!) CRITICAL: Always use -ac unless you have a specific reason not to. This is especially important when having Claude analyze results, as it dramatically reduces noise and false positives.

渗透测试期间 ffuf Web 模糊测试的专家指导，包括使用原始请求进行身份验证的模糊测试、自动校准和结果分析 来源：microck/ordinary-claude-skills。

查看原文