ffuf VS feroxbuster

It seems to me like "fuzzing" has a different meaning in web application penetration testing. Here, "fuzzer" is a term for tools that just generate different request using wordlists, without adding any mutations. For example, the two popular web fuzzers ffuf [1] and wfuzz [2] also call themselves fuzzers.

I see how reusing a term for a different concept is bothersome, but I feel like "fuzzer" is the term that people learning about bug bounty hunting are familiar with.

[1] https://github.com/ffuf/ffuf

[2] https://wfuzz.readthedocs.io/en/latest/

FFUF

I've been using ffuf happily for the past couple of years however I remember seeing a post on reddit/twitter about a new "intelligent" discovery tool.

Learn more about ffuf here: https://github.com/ffuf/ffuf

Also, I see you mentioned using curl. You can checkout ffuf which is closely related but more geared towards what you're doing.

git clone https://github.com/ffuf/ffuf ; cd ffuf ; go get ; go build

So ffuf (https://github.com/ffuf/ffuf) or wfuzz (https://github.com/xmendez/wfuzz) are a better choice to enumerate GET/POST parameters/values.

Ferox https://github.com/epi052/feroxbuster

Suggest using feroxbuster since you can brute force directories recursivly. Try

feroxbuster to do some web app browsing (you have also gobuster)

feroxbuster is a powerful mutli-threaded dir enumerator but be careful if you use it. It can crash websites if it hits them too fast.

Have you tried feroxbuster?

I redirect you here : https://github.com/epi052/feroxbuster

CloudBrute - To find company(mostly cloud hence the name) infrastructure files and arch to a certain extent Dirsearch - Yet another web app path scanner like Gobuster/Dirbuster FeroxBuster - Rust based tool to perform forced browsing(read about it on GitHub Ghidra - Binary disassembler and decompiler (alternatives are gdb and ISA) Pacu - AWS exploitation framework GitHub Pirates - Kali package tracker(maybe like yay or pacman,not too sure on that one) quark-engine - android malware analysis system here Viscose - very popular and good code editor

Dirbuster always bugs for me, I can't change anything after starting an attack without getting the entire GUI messed up. I recommend trying out ffuf or feroxbuster.