ffuf

Web Applicationkali · parrot

Fast web fuzzer for directories, virtual hosts, and parameters. Preferred over older gobusters for speed.

Install

sudo apt install ffuf

ffuf -w wordlist.txt -u https://target.com/FUZZ
ffuf -w params.txt -u https://target.com/api?FUZZ=1

Use only on systems you are authorized to test. Follow program scope.

Burp Suite

The industry-standard intercepting proxy for web app and API testing. Core bug bounty tool.

httpx

Fast HTTP toolkit from ProjectDiscovery for probing live hosts and tech detection.

OWASP ZAP

Free open-source web app scanner and proxy — solid Burp alternative for automated scans.

Dirb

Classic content scanner that brute-forces web directories and files.