1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
# This is an example of a ffuf configuration file.
# https://github.com/ffuf/ffuf
[http]
cookies = [
"cookiename=cookievalue"
]
data = "post=data&key=value"
followredirects = false
headers = [
"X-Header-Name: value",
"X-Another-Header: value"
]
ignorebody = false
method = "GET"
proxyurl = "http://127.0.0.1:8080"
raw = false
recursion = false
recursion_depth = 0
recursion_strategy = "default"
replayproxyurl = "http://127.0.0.1:8080"
timeout = 10
url = "https://example.org/FUZZ"
[general]
autocalibration = false
autocalibrationstrings = [
"randomtest",
"admin"
]
autocalibration_strategy = "basic"
autocalibration_keyword = "FUZZ"
autocalibration_perhost = false
colors = false
delay = ""
maxtime = 0
maxtimejob = 0
noninteractive = false
quiet = false
rate = 0
scrapers = "all"
stopon403 = false
stoponall = false
stoponerrors = false
threads = 40
verbose = false
json = false
[input]
dirsearchcompat = false
extensions = ""
ignorewordlistcomments = false
inputmode = "clusterbomb"
inputnum = 100
inputcommands = [
"seq 1 100:CUSTOMKEYWORD"
]
request = "requestfile.txt"
requestproto = "https"
wordlists = [
"/path/to/wordlist:FUZZ",
"/path/to/hostlist:HOST"
]
[output]
debuglog = "debug.log"
outputdirectory = "/tmp/rawoutputdir"
outputfile = "output.json"
outputformat = "json"
outputcreateemptyfile = false
[filter]
mode = "or"
lines = ""
regexp = ""
size = ""
status = ""
time = ""
words = ""
[matcher]
mode = "or"
lines = ""
regexp = ""
size = ""
status = "200,204,301,302,307,401,403,405,500"
time = ""
words = ""
|
