メニュー
Fast web fuzzer for discovering resources, directories, virtual hosts, and parameters. Use when you need to fuzz URLs, headers, POST data, or virtual hosts with a wordlist.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Automated tool-assisted strategies for blind injection attacks (SQL, NoSQL, command, XPath). Covers when and how to use sqlmap, custom scripting, and binary search optimization to minimize token consumption and execution time. Use when manual blind injection would require >20 sequential requests.
HTTP Request Smuggling (HRS) / Desync attack detection and exploitation. Covers CL.TE, TE.CL, TE.TE detection, payload crafting, and chaining with SSRF/cache poisoning. Use when front-end/back-end architecture is suspected or when HTTP parsing discrepancies exist.
Race condition vulnerability detection and exploitation. Covers time-of-check to time-of-use (TOCTOU), limit bypass, coupon abuse, and multi-endpoint race chains. Use when state-dependent logic (credits, inventory, votes, transfers) exists or CTF challenge involves concurrent operations.
Canonical Nmap CLI syntax, strict staged scanning workflow, and sandbox-safe bounded scan patterns with timeout backoff.
Exact Nuclei command structure, template selection, staged scanning workflow, and bounded high-throughput execution controls with timeout backoff.
Common CTF exploitation patterns, quick wins, and time-saving tricks for web, crypto, pwn, and misc challenges. Use when you are stuck on a CTF challenge or want to rapidly test known patterns.
| name | ffuf |
| description | Fast web fuzzer for discovering resources, directories, virtual hosts, and parameters. Use when you need to fuzz URLs, headers, POST data, or virtual hosts with a wordlist. |
| compatibility | Requires ffuf to be installed on the system. |
| metadata | {"category":"reconnaissance","tool":"ffuf"} |
Use this skill when the task involves:
Fuzz URL paths:
ffuf -u http://<target>/FUZZ -w /usr/share/wordlists/dirb/common.txt
Fuzz virtual hosts:
ffuf -u http://<target>/ -H "Host: FUZZ.<target>" -w subdomains.txt
Fuzz POST parameters:
ffuf -u http://<target>/login -X POST -d "username=admin&password=FUZZ" -w passwords.txt
| Flag | Description |
|---|---|
-u <url> | Target URL with FUZZ keyword |
-w <file> | Wordlist file |
-X <method> | HTTP method (GET, POST, etc.) |
-d <data> | POST data with FUZZ keyword |
-H <header> | Custom header with FUZZ keyword |
-mc <codes> | Match status codes |
-fs <size> | Filter by response size |
-t <threads> | Number of threads |
-o <file> | Output file |
-of <format> | Output format (json, csv, etc.) |
-t to control concurrency.