TOOL TUTORIAL · Web Application Security Testing

How to install and use Ffuf

Ffuf (Fuzz Faster U Fool) is a fast web fuzzer written in Go, used to discover hidden resources in web applications. It is designed to be highly efficient and supports various fuzzing techniques, making it a popular choice for security professionals conducting penetration tests …

Quick install: go install github.com/ffuf/ffuf/v2@latest

Installation steps

  1. Install the Go language toolchain first
  2. Install with go install github.com/ffuf/ffuf/v2@latest
  3. On Kali you can instead run sudo apt install ffuf
  4. Make sure your Go bin folder is on your PATH
  5. Check it works by running ffuf -h to see the options

See the full Ffuf reference →