Wfuzz 🐙

Content extracted from the Official Wfuzz documentation

Fuzzing paths and files

Directory fuzzing

wfuzz -w wordlist/general/common.txt http://testphp.vulnweb.com/FUZZ

File fuzzing

wfuzz -w wordlist/general/common.txt http://testphp.vulnweb.com/FUZZ.php

Fuzzing parameters in URLs

wfuzz -z range,0-10 --hl 97 http://testphp.vulnweb.com/listproducts.php?cat=FUZZ

Vhost enumeration

wfuzz -H "Host: FUZZ.vulnweb.web" -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt --hh 30587 https://vulnweb.web