메뉴
Fast web fuzzer for discovering resources, directories, virtual hosts, and parameters. Use when you need to fuzz URLs, headers, POST data, or virtual hosts with a wordlist.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | ffuf |
| description | Fast web fuzzer for discovering resources, directories, virtual hosts, and parameters. Use when you need to fuzz URLs, headers, POST data, or virtual hosts with a wordlist. |
| compatibility | Requires ffuf to be installed on the system. |
| metadata | {"category":"reconnaissance","tool":"ffuf"} |
Use this skill when the task involves:
Fuzz URL paths:
ffuf -u http://<target>/FUZZ -w /usr/share/wordlists/dirb/common.txt
Fuzz virtual hosts:
ffuf -u http://<target>/ -H "Host: FUZZ.<target>" -w subdomains.txt
Fuzz POST parameters:
ffuf -u http://<target>/login -X POST -d "username=admin&password=FUZZ" -w passwords.txt
| Flag | Description |
|---|---|
-u <url> | Target URL with FUZZ keyword |
-w <file> | Wordlist file |
-X <method> | HTTP method (GET, POST, etc.) |
-d <data> | POST data with FUZZ keyword |
-H <header> | Custom header with FUZZ keyword |
-mc <codes> | Match status codes |
-fs <size> | Filter by response size |
-t <threads> | Number of threads |
-o <file> | Output file |
-of <format> | Output format (json, csv, etc.) |
-t to control concurrency.Automated tool-assisted strategies for blind injection attacks (SQL, NoSQL, command, XPath). Covers when and how to use sqlmap, custom scripting, and binary search optimization to minimize token consumption and execution time. Use when manual blind injection would require >20 sequential requests.
HTTP Request Smuggling (HRS) / Desync attack detection and exploitation. Covers CL.TE, TE.CL, TE.TE detection, payload crafting, and chaining with SSRF/cache poisoning. Use when front-end/back-end architecture is suspected or when HTTP parsing discrepancies exist.
Race condition vulnerability detection and exploitation. Covers time-of-check to time-of-use (TOCTOU), limit bypass, coupon abuse, and multi-endpoint race chains. Use when state-dependent logic (credits, inventory, votes, transfers) exists or CTF challenge involves concurrent operations.
Canonical Nmap CLI syntax, strict staged scanning workflow, and sandbox-safe bounded scan patterns with timeout backoff.
Exact Nuclei command structure, template selection, staged scanning workflow, and bounded high-throughput execution controls with timeout backoff.
Common CTF exploitation patterns, quick wins, and time-saving tricks for web, crypto, pwn, and misc challenges. Use when you are stuck on a CTF challenge or want to rapidly test known patterns.