How to use ffuf - Hacker Toolbox

ffuf is quickly becoming a key tool for bug bounty hunters, but how do you use it? In this video I start at the basics showing some really neat features of ffuf and how you can use some simple one-liners to do rather complex fuzzing!
Did you know this episode was sponsored by Intigriti? Sign up with my link go.intigriti.co... I'm so pleased with everyone's positive response to the Intigriti sponsorship and I'm so pleased you folks are finding bugs and even finding your first bugs! Thank you for being awesome!
ffuf is well known as a brute-forcing tool, but did you know it can be used for so much more than directory discovery?? I didn't! The FUZZ keyword is so powerful you can use it to fuzz headers, parameters, and add filters to cut down false positives. With the right wordlist ffuf can become the go-to tool for bug hunting.
Resources
ffuf : github.com/ffu...
Installing ffuf into the PATH OSX : superuser.com/...
Installing ffuf into the PATH Windows : superuser.com/...
SecLists : github.com/dan...
TomNomNom's talk : • Who, What, Where, When...
Here are the one-liners I use: gist.github.co...
My ffuf translator: insiderphd.dev...
0xatul's jq translator: jqplay.org/s/x...
Patrik's jq translator: / 1301086393108758528
Connect with me
Twitter : / insiderphd
InsiderPhD Discord : / discord
Patreon : / insiderphd

[@dhruvkandpal9909]

Oh my god!!! THIS VIDEO DESERVES A HUGE ROUND OF APPLAUSE from the BUG BOUNTY community!! I ABSOLUTELY LOVED IT Katie!!

[@richardjones9598]

Is very clear and concise info tbf, great job, Katie!

[@hashimmajid7905]

thank you for your content, it's logical to read docs for any tools, but watching a pro like you using a tool and getting inside your mindset and feeling your enthusiasm is much better learning process, this channel is a gold mine!

[@jawadsaqib1260]

You are just awesome explaining everything with so much detail and in-depth knowledge. Thank you for making stuff. More power to you

[@Abhijitkamath14]

I really like the way you explain things .... the accent, the tone and all ... smooth

[@InfoSecIntel]

That replay proxy option blew my mind. Thank you!

[@InsiderPhD]

SAME TBH

[@carp6509]

I don't know how anyone could downvote this. Amazing content! Thank you so much!

[@Ragab0t]

Awesome video thanks for sharing! BTW One of the coolest things about teaching about a new subject is how much new stuff you end up learning about said subject. That's probably why teaching is the best way to learn!

[@wnmetal666]

Amazing explanation and examples of the features. I was struggling with too many code 200, this video helped me get that filtered out properly.

[@kon5791]

thanks for keeping it short and sweet! :) I love me a conciese and easy to follow explanation

[@RUFAID]

Thanks for making this type of video. And it is begginer friendly . Plz one favor Plz incress the voice sound little more . Don't take tress, but increase it plz plz please

[@InsiderPhD]

I've addressed this problem in the video pipeline and it should be fixed now for future videos

[@theblackzeini9004]

The way you explain is amazing, keep goin'

[@jasonmikinskiwallet4308]

Oh WOW!!!!!! This is amazingggg. Ffuf dream tool.

[@arman-ez3ir]

love these kind of tuts, well done

[@d-rey1758]

Cool vid! any info on the steps between ffuf finds the errors and claiming a bounty?

[@fenilshah9221]

Claps! This is what I was waiting for! I hope you'll soon cover other tools such as gau,gf,etc!

[@InsiderPhD]

I'm thinking the next videos will be recon: subdomain enum and then a standalone video on amass! But I'll note these down !

[@varunmehta3230]

Such a awesome knowledge sharing video. Thanks a lot ❤️. love from India .

[@rosa3709]

The content is great and easy to understand! Thanks 🙏🏼

[@sumanparajuli229]

Mam..Please...... can you create a video on how to implement business logic in bug hunting and money practically on a real websites or web apps???????????

[@InsiderPhD]

I really want to do some live hacking on a real target! But I'm still trying to speak to other hackers/program managers to figure out what the best way might be to demo without breaking confidentiality!

[@sumanparajuli229]

@@InsiderPhD Ok mam... so please i highly request you to make more videos on business logic for bug...

[@DeLFeTube]

What an insanely good video! Thank you!

[@TheEasternCoder]

Concept of using ffuf replay proxy is amazing. Thanks for introducing a great tool . Is there any method to pipeline the output of crunch/any wordlist generator to ffuf ??🙄

[@akshaydeodare6149]

the video is very dark ! It takes effort to look whats written on the screen ! content : Awesome as always

[@InsiderPhD]

Thank you for the feedback!

[@akshaydeodare6149]

InsiderPhD for example : the json part from 10:27

[@InsiderPhD]

It can sometimes be an issue since people might be watching my videos at a lower quality or on mobile and I'm a bit of an idiot and forget that sometimes! So esp as I try out the dark mode theme, it's useful to get this kind of feedback!

[@super3d201]

Really great Video and detailed aswell. Thanks, that helped me alot

[@joakimtauren1286]

Super great content! Thank you so much!

[@_0x01m]

thank you it was super cool video i learn more with u ..

[@d3vashishs0ni]

A very informative video. thank you very much 😊😊

[@kabirsuda]

Thanks for the video, love it!💛

[@InsiderPhD]

You're so welcome!

[@anshusharma5199]

Someone told me today to use it and see how lucky I am, Thanks 🙏😊

[@InsiderPhD]

You're welcome 😊 I'm reading your mind obviously :P

[@anshusharma5199]

@@InsiderPhD thanks again I like the way you teach (10¹²³ * 👍)

[@7he7hief95]

Thanks Kate, you make things clearer as always and I love your enthusiasm. Kisses from 7he7hief * meow

[@mi2has]

Thank you for the great video !

[@omerfarooqdemir9907]

thanks for this video. THIS VIDEO AMAZING

[@ardaucd]

Is the playlist Everything API Hacking up to date, are all API videos in this channel in this list?

[@hellb0y794]

Great video katie, thanks 🚀

[@sy-gamer9556]

Your videos are really awesome love it.also I want to ask something I have a jail broken ios device everything setup and ready to go and also I know a little bit of iOS knowledge but I can’t decide by myself what to choose iOS bug bounty or web any suggestion pls..

[@InsiderPhD]

iOS has a big advantage and disadvantage: Almost no one is doing it, which means there's not as many resources BUT there's a lot more bugs to be found! I would focus on API hacking, it applies to both web+iOS and it's a good way to get started in iOS (EXACTLY the same bugs) without getting lost. I'm actually writing a video at the moment on how to hack on mobile APIs

[@sy-gamer9556]

InsiderPhD awesome thank u I was just confused a lot thank a lot Katie hugeeee love and thanks

[@sy-gamer9556]

And 1 more question what are the bugs to look for aside web bugs in iOS applications

[@PhayulDigest]

Awesome video, thanks so much!

[@ygorsardinha5521]

Katie you Rock!

[@orlyounotinbaires]

Excellent video as always, love your enthusiasm! PS: you should do a video together with Stök :D

[@InsiderPhD]

One day I hope so! We haven't found a good time for us both yet :) though we have had a chat and got a concept of what we wanna do!

[@picious]

when Brute force is out of scope it means that you can't run FFUF or no?? , Thank you for the video !

[@InsiderPhD]

You can use ffuf! Brute force being out of scope usually means brute forcing user/password combos, they might ask for w delay though and a limit to x requests a second, so keep an eye out for that

[@picious]

@@InsiderPhD thank you for your reply :)

[@brokeitguyio]

Thanks for the tutorial

[@maakthon5551]

Great as usual , Thanks.

[@shayboual1892]

very useful and informative video

[@jozefwoo8079]

Very good video. If I may nitpick: it's intigrity and not integrity 🙂

[@zeeshansaeed8997]

Thanks, Katie for creating such awesome content.

[@InsiderPhD]

Thanks for watching!

[@Thenileshpatil]

hey katie help with what should we look on which type of target

[@unknownerror58]

It's not installing in Termux😥😥

[@mastawitcha231]

Does it do the same job as wfuzz in every aspect or is one better than the other? both are fuzzing tools

[@InsiderPhD]

Does the same job, it's written in go so it's a little faster, but it's personal preference. The cool thing about ffuf is the focus on bug bounties and how active the developer is in the community! But feature wise very very similar

[@nowonder9466]

At 18.02 you said that ME will come from the action wordlist and FUZZ will come from that wordlist while pointing at the second FUZZ. What did you mean by that? The FUZZ part.

[@InsiderPhD]

Basically if you do -w wordlist.txt:WORD you can use multiple wordlists, or fuzz in multiple areas, or do both!

[@cyberindia1]

Nice explanation

[@haileleulgirma1087]

I wanted to be excited just like you, but I just can't find the reason to use it over burp intruder. Given the world lists, both can do the job

[@InsiderPhD]

I also like intruder but I know a lot of people want speed w/o having to pay for pro, so ffuf is a good option

[@remonsec]

Thanks a lot.

[@ashhadhats4842]

Will u creste a video how to creste a custom word list i watching tomnomnom but please u can create your own

[@InsiderPhD]

This is actually coming soon :) it's something I'm working on a methodology for! But it'll be a while until it's ready!

[@vanshajdhar9223]

Amazing video 👌👌👌

[@AkashwithUS]

I waited for this ♥️

[@InsiderPhD]

I hope it was worth the wait!

[@AkashwithUS]

@@InsiderPhD yes 🙂 I know about some bugs like spf, cors, xss, clickjacking, subdomain takeover. How to know this website has those vulnerabilities ..... Automatically... Then please recommend me to where to learn vulnerabilities .... I hope you reply

[@saminbinhumayun858]

If there is scope given in bb program do we need to do directory bruteforcing?

[@InsiderPhD]

I don't, but some people do

[@saminbinhumayun858]

@@InsiderPhD got it..thank you

[@kandarpmishra6009]

How do i know its an API request or response ??

[@mazingerzeta2xx788]

What is the difference between Ffuf and Amass? wich one id faster and less complicated to use?

[@InsiderPhD]

Ffuf is easier for most things, amass has a lot of uses and can be quite complex to use

[@mazingerzeta2xx788]

but they but they both perform same task right ?

[@roninhacked2045]

Hey katie , I am new to hacking WHAT is the best OS that you recommend to me Please reply soon

[@InsiderPhD]

Whatever you're using right now is fine! You don't need to use any OS to get into hacking!

[@roninhacked2045]

Even if it is windows But how to install them

[@kevinnyawakira4600]

thanks

[@josephnimsara3169]

awesome

[@josephnimsara3169]

can you add nest bug bounty series

[@InsiderPhD]

Nest?

[@josephnimsara3169]

@@InsiderPhD sorry next bug bounty series

[@InsiderPhD]

@@josephnimsara3169 Aha! I'm actually working on a video right now, spoiler alert on account takeovers, it's just not quittteeee ready to be released yet!

[@InsiderPhD]

It's almost done though, 90%-ish

[@logmantarig]

This actually an Awesome video and great tool with an invaluable information thanks a lot, probably dislikers are Gobuster users.

[@moathaljmaan7331]

🖐have fife for your explain

[@recon0x7f16]

how do u pipe with this

[@ashleypursell9702]

this is actually as close as command line burp intruder as you can get

[@InsiderPhD]

*cough* if you don't have premium it's better than command line burp intruder, it's not speed limited Wow what a weird cough, covid amiright?

[@skyawesome7362]

The command doesn’t work on mac

[@InsiderPhD]

You need to install ffuf first using the GitHub link :)

[@saikiranlingadally1036]

❤️

[@InsiderPhD]

First comment, very quick!

[@saikiranlingadally1036]

@@InsiderPhD yeah, hope i will get next one too😊😎

[@DavidRawls-b9p]

Grady Inlet

[@GregoryTripp-p7r]

Matilda Extension

[@ricardotech]

[@MH-tw1qi]

Hmm i will use ffuf instead dirsearch

[@AkashwithUS]

Hi mam I know only terminal and cmd what is this looks new..???

[@InsiderPhD]

Check out my video on API enumeration to get a better idea of why you might use a tool like ffuf

[@AkashwithUS]

@@InsiderPhD thanks for your reply 🙂 please make a live session on ffuf🔥

[@InsiderPhD]

I have insider knowledge that the video you seek is on it's way but by another creator ;)

[@sechunter1903]

😍 😛

[@ДмитрийАстафьев-с1й]

hgyug

[@abelimathiasi7509]

25+ mins and i ddnt even get to know what you where teaching ... i cnt even see the help menu of the TOOL SHAME ON YOU .....

[@Sakuraigi]

She is great. You suck