https://cybertoolchain.io/tools/ffuf New releases and features in ffuf, tracked by The Cyber Toolchain. en Wed, 09 Sep 2026 19:16:19 GMT https://github.com/ffuf/ffuf/releases/tag/v2.3.0 https://github.com/ffuf/ffuf/releases/tag/v2.3.0 Wed, 09 Sep 2026 19:16:19 GMT ffuf v2.3.0 adds preflight/postflight requests with variable extraction and bounds response snapshot sizes⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds preflight and postflight requests with variable extraction, enabling multi-step request chains where values captured from an earlier response can be injected into subsequent fuzz requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Bounds the `-od`/`-audit-log` response snapshot and response header size to cap on-disk and in-memory growth during large fuzzing runs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ffuf https://github.com/ffuf/ffuf/releases/tag/v2.2.0 https://github.com/ffuf/ffuf/releases/tag/v2.2.0 Sat, 11 Jul 2026 13:05:14 GMT ffuf v2.2.0 adds audit logging to record all fuzzing activity for compliance and review. • Adds audit logging functionality to record fuzzing sessions for compliance, review, and reporting purposes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ffuf https://github.com/ffuf/ffuf/releases/tag/v2.1.0 https://github.com/ffuf/ffuf/releases/tag/v2.1.0 Sat, 16 Sep 2023 12:23:19 GMT ffuf v2.1.0 adds extensible auto-calibration, -raw flag, automatic brotli/deflate decompression, Pencode support, and cert auth for crawlers • Adds `-raw` CLI flag to pass the request body exactly as written in the fuzz position without automatic escaping • Adds `Pencode` support via `-p <config>` flag allowing use of custom encoding/decoding layers defined in Pencode-compatible scripts • Enables certificate authentication for crawler endpoints by adding `cert_file` and `key_file` fields to the `Crawler` section in `.ffuf.yml` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ffuf https://github.com/ffuf/ffuf/releases/tag/v2.0.0 https://github.com/ffuf/ffuf/releases/tag/v2.0.0 Mon, 06 Feb 2023 09:28:04 GMT Adds scraper functionality for passive data gathering and blind payload mapping in ffuf v2.0.0 • Adds `scraper` functionality to enable passive data gathering during fuzzing campaigns • Adds capability to map fired blind payloads back to the initial request for correlation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ffuf https://github.com/ffuf/ffuf/blob/master/CHANGELOG.md https://github.com/ffuf/ffuf/blob/master/CHANGELOG.md Thu, 19 May 2022 06:55:04 GMT ffuf 1.5.0 adds `-ach`, `-ack`, `-acs` autocalibration flags and `fmode`/`mmode` matchers/filters logic • Adds `-ach`, `-ack`, and `-acs` flags to control the new autocalibration process • Adds `fmode` CLI flag to set matcher logic to "and" or "or" Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ffuf https://github.com/ffuf/ffuf/releases/tag/v1.4.0 https://github.com/ffuf/ffuf/releases/tag/v1.4.0 Sat, 26 Mar 2022 09:04:42 GMT ffuf v1.4.0 adds JSON output (-json), Sniper Mode, HTTP/2 support, response time filtering, and TLS SNI support. • Adds `-json` flag to output results in JSON format • Adds `Sniper Mode` for automated parameter fuzzing strategies • Adds HTTP/2 protocol support • Adds response time logging and filtering capabilities • Adds TLS SNI (Server Name Indication) support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ffuf