ffuf

No entries match these filters. Clear filters

1. v2.3.0 Sep 9, 2026 · issue 070

   ffuf v2.3.0 adds preflight/postflight requests with variable extraction and bounds response snapshot sizes⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.3.0 https://github.com/ffuf/ffuf.git
   # already have the repo? check out this version:
   $ git checkout v2.3.0

   • Adds preflight and postflight requests with variable extraction, enabling multi-step request chains where values captured from an earlier response can be injected into subsequent fuzz requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Bounds the -od/-audit-log response snapshot and response header size to cap on-disk and in-memory growth during large fuzzing runs.
   • Adds preflight and postflight requests with variable extraction, enabling multi-step request chains where values captured from an earlier response can be injected into subsequent fuzz requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

2. advisory CVE-2026-73232 Jul 11, 2026 · issue 128
   • CVE-2026-73232: ffuf denial of service (OOMOOMAn out-of-memory condition: a program requests more memory than the system or device can provide. The allocation fails or the operating system may stop the process.) via HTTP response decompression bomb (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 7.5, affects <= 2.1.0)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
3. v2.2.0 Jul 11, 2026 · issue 013

   ffuf v2.2.0 adds audit logging to record all fuzzing activity for compliance and review.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.2.0 https://github.com/ffuf/ffuf.git
   # already have the repo? check out this version:
   $ git checkout v2.2.0

4. v2.1.0 Sep 16, 2023 · release notes

   ffuf v2.1.0 adds extensible auto-calibration, -raw flag, automatic brotli/deflate decompression, Pencode support, and cert auth for crawlers

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.1.0 https://github.com/ffuf/ffuf.git
   # already have the repo? check out this version:
   $ git checkout v2.1.0

   • Adds -raw CLI flag to pass the request body exactly as written in the fuzz position without automatic escaping
   • Adds Pencode support via -p <config> flag allowing use of custom encoding/decoding layers defined in Pencode-compatible scripts
   • Enables certificate authentication for crawler endpoints by adding cert_file and key_file fields to the Crawler section in .ffuf.yml

   3 details in Everything

5. v2.0.0 Feb 6, 2023 · release notes

   Adds scraper functionality for passive data gathering and blind payload mapping in ffuf v2.0.0

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.0.0 https://github.com/ffuf/ffuf.git
   # already have the repo? check out this version:
   $ git checkout v2.0.0

   • Adds scraper functionality to enable passive data gathering during fuzzing campaigns
   • Adds capability to map fired blind payloads back to the initial request for correlation

   2 details in Everything

6. 1.5.0 May 19, 2022 · release notes

   ffuf 1.5.0 adds -ach, -ack, -acs autocalibration flags and fmode/mmode matchers/filters logic

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.5.0 https://github.com/ffuf/ffuf.git
   # already have the repo? check out this version:
   $ git checkout 1.5.0

   • Adds -ach, -ack, and -acs flags to control the new autocalibration process
   • Adds fmode CLI flag to set matcher logic to and or or

   2 details in Everything

7. v1.4.0 Mar 26, 2022 · release notes

   ffuf v1.4.0 adds JSON output (-json), Sniper Mode, HTTP/2 support, response time filtering, and TLS SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. support.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.4.0 https://github.com/ffuf/ffuf.git
   # already have the repo? check out this version:
   $ git checkout v1.4.0

   • Adds -json flag to output results in JSON format
   • Adds Sniper Mode for automated parameter fuzzing strategies
   • Adds HTTP/2 protocol support
   • Adds response time logging and filtering capabilities
   • Adds TLS SNI (Server Name Indication) support

   5 details in Everything

8. v1.3.1 Apr 27, 2021 · release notes

   v1.3.1 adds --noninteractive flag and recursive output directory creation.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.3.1 https://github.com/ffuf/ffuf.git
   # already have the repo? check out this version:
   $ git checkout v1.3.1

   └──▷ USE IT
   Run ffuf in a CI/CD pipeline without interactive prompts blocking execution.
   shell copy

   ffuf -w wordlist.txt -u http://example.com/FUZZ --noninteractive

   • Adds the --noninteractive flag to disable interactive mode
   • Creates output directories recursively instead of silently failing

   2 details in Everything

9. v1.3.0 Apr 18, 2021 · release notes

   ffuf v1.3.0 adds interactive mode with recursive fuzzing and includes Content-Type in all output formats

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.3.0 https://github.com/ffuf/ffuf.git
   # already have the repo? check out this version:
   $ git checkout v1.3.0

   └──▷ USE IT
   Run ffuf interactively to manually approve or skip fuzzing branches based on real-time results.
   shell copy

   ffuf -u https://example.com/FUZZ -w wordlist.txt --interactive

   Enable recursive fuzzing starting from the root directory during an interactive session.
   shell copy

   ffuf -u https://example.com/FUZZ/FUZZ2 -w wordlist.txt --interactive --recursive-strategy root

   • Adds --interactive flag to enable interactive mode where results are presented for review before the next request is sent.
   • Adds new --recursive-strategy options (full, parent, root) to control recursive fuzzing depth in interactive mode.
   • Includes Content-Type header in all output formats (JSON, CSV, etc.)

   3 details in Everything

10. v1.2.0 Jan 24, 2021 · release notes

    ffuf v1.2.0 adds configurable input-shell, HTTP 405 default match, and config file support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.2.0 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v1.2.0

    └──▷ USE IT
    Scan for both 200 OK and 405 Method Not Allowed responses in a single pass
    shell copy

    ffuf -u https://example.com/FUZZ -w wordlist.txt -mc 200,405

    • Adds --input-shell flag to allow custom shell execution for dynamic inputs
    • Adds --config flag to load settings from a configuration file
    • Adds 405 Method Not Allowed to the list of status codes matched by default with -mc
    • Adds support for comma-separated values in multiple -w flags

    4 details in Everything

11. v1.1.0 Jul 23, 2020 · release notes

    ffuf v1.1.0 adds JSON output with Host info and concurrent multi-format exports.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.1.0 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v1.1.0

    • Adds Host field to the json output format (and by extension to .hjson) to include the target host in the output file
    • Enables writing to multiple output formats simultaneously using the existing -of flag, allowing concurrent export of results to all supported formats

    2 details in Everything

12. v1.0 Jan 29, 2020 · release notes

    ffuf v1.0 adds recursive jobs, raw request parsing, response filesystem output, and time-limit flags.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.0 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v1.0

    └──▷ TRY IT
    Limit fuzzing duration to prevent long-running jobs in automated pipelines.
    copy

    $ ffuf -w wordlist.txt -u https://example.com/FUZZ -maxtime 60

    Replay matched requests through a proxy like Burp Suite for further inspection.
    copy

    $ ffuf -w wordlist.txt -u https://example.com/FUZZ -replay-proxy http://127.0.0.1:8080

    • -maxtime flag to limit the running time of ffuf
    • Added ignore comment option for fuzzing input
    • Added raw request parsing option
    • Write requests and responses to filesystem if requested
    • fuzzing input in result

    +1 more show less

    • Replay matches using a chosen proxy

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The -k flag support is removed and converted to a dummy flag
13. v0.12 Nov 16, 2019 · release notes

    ffuf v0.12 adds verbose mode (-v), --debug-log, SIGTERM handling, and HTML DataTables support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.12 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v0.12

    • Adds the -v / --verbose flag to display progress updates during fuzzing runs
    • Introduces the --debug-log <path> option to direct internal debug errors to a specified file
    • Enables HTML output export with DataTables JavaScript library for interactive filtering and sorting
    • Adds RedirectLocation and full URL fields to all output formats to capture redirect chains
    • Implements automated SIGTERM signal monitoring to allow graceful shutdown of active fuzzing jobs

    5 details in Everything

14. v0.11 Nov 10, 2019 · release notes

    ffuf v0.11 adds multiple wordlist support, HTML/Markdown output, HTTP verb fuzzing, and range-based filters.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.11 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v0.11

    └──▷ USE IT
    Fuzz with multiple wordlists and output results in HTML format for easy reporting.
    shell copy

    ffuf -w wordlist1.txt:W1,wordlist2.txt:W2 -u https://target.com/FUZZ -of html -o report.html

    Fuzz HTTP methods and filter by status code ranges.
    shell copy

    ffuf -u https://target.com/ -X GET,POST,PUT -fc 404 -fs 10-20

    Debug logging for troubleshooting fuzzing behavior.
    shell copy

    ffuf -u https://target.com/FUZZ -w wordlist.txt -debug-log debug.log

    • Add Multiple wordlist support, enabling the use of several dictionaries in a single fuzzing session
    • Add HTML and Markdown output formats via new CLI flags
    • Enable HTTP verb fuzzing by specifying multiple methods on the command line
    • Allow range expressions (e.g., 10-20) for size, word count, or status code filtering/matching
    • Output line counts in filter/matcher results and stdout/csv/json outputs

    +5 more show less

    • Match both lowercase %ext% and uppercase %EXT% placeholders in DirSearch compatibility mode
    • Add -debug-log flag to write debug information to a file
    • Support custom autocalibration strings for dynamic filtering adjustments
    • Include redirect location URLs in stdout output when redirects occur
    • Support additional curl options (-i, --data-ascii/-binary, -b/--cookie) via CLI flags

    10 details in Everything

15. v0.10 Jun 16, 2019 · release notes

    ffuf v0.10 adds --input-cmd, wordlist stdin mode, custom timeouts, and filter auto-calibration

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.10 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v0.10

    └──▷ USE IT
    Use dynamic input from a script to generate unique payloads for each request
    shell copy

    ffuf -u https://example.com/FUZZ -w - --input-cmd 'echo "payload1\npayload2"'

    Pipe a generated wordlist directly into ffuf without creating a temporary file
    shell copy

    cat /tmp/my_wordlist.txt | ffuf -u https://example.com/FUZZ -w -

    Prevent hanging on slow targets by setting a 30-second request timeout
    shell copy

    ffuf -u https://example.com/FUZZ -w wordlist.txt -timeout 30s

    • Adds --input-cmd flag to drive fuzzing input via an external command output
    • Adds support for feeding the wordlist from standard input (stdin) when the file argument is -
    • Adds -timeout <duration> flag to set a custom HTTP request timeout instead of the default
    • Adds automatic calibration of size and word count filters based on target response characteristics

    4 details in Everything

16. v0.9 Apr 13, 2019 · release notes

    New CSV output support and extension appending via -e flag

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.9 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v0.9

    └──▷ TRY IT
    Save ffuf scan results to a CSV file for external analysis
    copy

    $ ffuf -w wordlist.txt -u https://example.com/FUZZ -of csv -o results.csv

    Automatically append .php extensions to all words in the wordlist during a scan
    copy

    $ ffuf -w wordlist.txt -u https://example.com/FUZZ -e php

    • Adds CSV output format to ffuf results via the -of csv flag
    • Adds -e flag to append specified extensions to wordlist entries, replacing %EXT% placeholders
    • Adds -D flag for DirSearch wordlist format compatibility alongside -e

    3 details in Everything

17. v0.8 Mar 29, 2019 · release notes

    ffuf v0.8 adds proxy support, JSON output, stop on 403 flag, and header regex filtering.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.8 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v0.8

    • Adds --proxy configuration to route requests through a proxy server
    • Adds --output-format json to write results in JSON format
    • Adds -s flag to stop fuzzing on spurious 403 responses
    • Enhances regex filter to match HTTP headers in addition to URLs

    4 details in Everything

18. v0.6 Nov 15, 2018 · release notes

    ffuf v0.6 adds -V flag to print version and supports HTTP 403 in default filters

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v0.6

    • Includes HTTP response 403 in the default list of filtered status codes

    1 detail in Everything

19. v0.4 Nov 12, 2018 · release notes

    ffuf v0.4 adds regexp and word filter/matchers for flexible filtering

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.4 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v0.4

    └──▷ TRY IT
    Filter requests that don't match a specific regex pattern in the response body to narrow down interesting findings.
    copy

    $ ffuf -u https://target.com/FUZZ -w wordlist.txt --regexp '^[0-9]{4}-[0-9]{2}-[0-9]{2}$'

    • Adds --regexp filter to allow regex-based request or response filtering
    • Adds --wordfilter and --wordmatcher options to add word-level filtering logic

    2 details in Everything

20. v0.3 Nov 9, 2018 · release notes

    ffuf v0.3 adds color output, progress/duration UI, and stderr error piping.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.3 https://github.com/ffuf/ffuf.git
    # already have the repo? check out this version:
    $ git checkout v0.3

    • Adds colorized output for terminal display.
    • Adds progress bar and duration tracking to the UI.
    • Prints error messages to stderr to support -s output piping.

    3 details in Everything