ffuf-claude-skill

name	ffuf-claude-skill
description	Use when you need to perform authorized web fuzzing with ffuf through a safe, reviewable workflow that starts with baseline calibration, uses explicit matcher/filter logic, bounds runtime, and preserves reproducible output for handoff.
version	0.0.1
category	fullstack-web
tags	["ffuf-claude-skill","web","fuzzing","ffuf","content-discovery","forced-browsing","vhost","fullstack-web","omni-enhanced"]
complexity	intermediate
risk	safe
tools	["ffuf","curl","bash","codex-cli","claude-code","cursor","gemini-cli","opencode"]
source	omni-team
author	Omni Skills Team
license	Upstream repository license applies; verify before redistribution
date_added	2026-04-14
date_updated	2026-05-10
source_type	omni-curated
maintainer	Omni Skills Team
family_id	ffuf-claude-skill
family_name	Ffuf Claude Skill
variant_id	omni
variant_label	Omni Curated
is_default_variant	true
derived_from	skills/ffuf-claude-skill
upstream_skill	skills/ffuf-claude-skill
upstream_author	sickn33
upstream_source	community
upstream_pr	271
upstream_head_repo	diegosouzapw/awesome-omni-skills
upstream_head_sha	93ab394af5645f7127d5003ee02c9566ae5353cd
curation_surface	skills_omni
enhanced_origin	omni-skills-private
source_repo	diegosouzapw/awesome-omni-skills
replaces	["ffuf-claude-skill"]

Ffuf Claude Skill

Overview

This skill supports authorized web fuzzing with ffuf using a workflow that is practical for operators and safe for review and handoff.

Use it when you need to:

• discover directories, files, parameters, or virtual hosts with ffuf
• establish a baseline response before choosing filters
• use explicit matcher/filter logic instead of guessing from one-off responses
• bound scan runtime with rate, timeout, recursion, and max-time controls
• preserve machine-readable output for later review, triage, or merge handoff

This enhanced version keeps the upstream identity and intent, but rewrites the operational guidance into a clearer English workflow.

When to Use

Use this skill when all of the following are true:

• you have authorization to test the target
• the task is content discovery, forced browsing, virtual host discovery, or similarly scoped web fuzzing
• ffuf is the right tool for the job, rather than a browser-only review or a full scanner
• you need output that another operator can reproduce from the command line

Typical triggers:

• “Find hidden directories or admin panels on this app.”
• “Enumerate virtual hosts behind this IP or reverse proxy.”
• “Fuzz a parameter or endpoint with a controlled request template.”
• “Run a safe, bounded ffuf pass and give me the results in JSON.”

Do not use this skill when:

• the user lacks permission to test the target
• the task requires exploitation rather than discovery
• the target is too fragile for active fuzzing
• a different protocol or tool family is required

Workflow

1. Confirm scope and safety constraints

   • Verify target hosts, paths, methods, allowed rate, and time window.
   • Prefer the smallest wordlist and narrowest target that can answer the question.
   • Decide whether the job is path discovery, file extension discovery, parameter fuzzing, or vhost enumeration.

2. Collect a baseline response before fuzzing

   • Fetch the target with curl or a browser once.