ffuf

What it does

ffuf brute-forces directories, files, virtual hosts, and parameters at high speed using wordlists. It's a core tool for mapping hidden web content and inputs.

Common use cases

• •Brute-force hidden directories and files on a web server during web-application testing.
• •Discover valid virtual hosts by fuzzing the Host header against a target's origin server.
• •Enumerate GET and POST parameters to uncover hidden API endpoints and debug functions.

Key features

• •Multithreaded fuzzing engine capable of thousands of requests per second.
• •Supports keyword-based fuzzing of any part of the request — URL, headers, body.
• •Filters results by HTTP status, response size, word count, and regex patterns.
• •Pauses and resumes scans without losing progress through an interactive shell.

Source