← All skills
ffuf-web-fuzzing
77 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By lifangda/claude-plugins (GitHub) · coding · 43 stars · scanned at commit 76d90e8
Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 6 places.
Show 3 more
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 60 places.
Show 17 more
- cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 65
ffuf -w /path/to/params.txt -u https://target.com/script.php?FUZZ=test_value -fs 4242 - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 77
ffuf -w /path/to/passwords.txt -X POST -d "username=admin&password=FUZZ" -u https://target.com/login.php -fc 401 - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 89
ffuf -w /path/to/wordlist.txt -u https://target.com -H "X-Custom-Header: FUZZ" - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 118
ffuf -w /path/to/wordlist.txt -u https://target.com/FUZZ -ac - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 141
ffuf -w /path/to/wordlist.txt -u https://target.com/FUZZ -rate 2 - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 153
ffuf -w /path/to/wordlist.txt -u https://target.com/FUZZ -maxtime 60 - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 164
ffuf -w /path/to/wordlist.txt -u https://target.com/FUZZ -o results.json - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 195
ffuf --request req.txt -w /path/to/wordlist.txt -ac - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 226
ffuf --request req.txt -w user_ids.txt -ac -mc 200 -o results.json - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 235
ffuf -w /path/to/wordlist.txt -u https://target.com/FUZZ -x http://127.0.0.1:8080 - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 247
ffuf -w /path/to/wordlist.txt -u https://target.com/FUZZ -b "sessionid=abc123; token=xyz789" - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 256
ffuf -w /path/to/wordlist.txt -u https://target.com/FUZZ -enc 'FUZZ:urlencode' - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 265
ffuf -w sqli_payloads.txt -u https://target.com/page.php?id=FUZZ -fs 1234 - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 277
cat targets.txt | xargs -I@ sh -c 'ffuf -w wordlist.txt -u @/FUZZ -ac' - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 290
ffuf -w wordlist.txt -u https://target.com/FUZZ -ac - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 299
ffuf --request req.txt -w wordlist.txt -ac -o results.json - cli-tool/skills-library/security/ffuf-fuzzing/SKILL.md, line 313
ffuf -w wordlist.txt -u https://target.com/FUZZ -rate 2 -t 10
and 40 more places
Sends data to these websites: api.target.com
This is disclosed by the author in the skill's SKILL.md or README.
Found in 2 places.
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Other copies in this repository
lifangda/claude-plugins has 1 more folder with a skill named ffuf-web-fuzzing. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'ffuf-web-fuzzing' ] || [ -L ~/.agents/skills/'ffuf-web-fuzzing' ]; then echo 'A skill folder named ffuf-web-fuzzing already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/lifangda/claude-plugins' "$d" && git -C "$d" checkout --quiet '76d90e8304f792a3c98ddd4172ec7ec59b1e656f' -- 'cli-tool/skills-library/security/ffuf-fuzzing' && mkdir -p ~/.agents/skills && cp -R "$d"/'cli-tool/skills-library/security/ffuf-fuzzing' ~/.agents/skills/'ffuf-web-fuzzing' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'ffuf-web-fuzzing' ~/.claude/skills/'ffuf-web-fuzzing' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for lifangda/claude-plugins shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/lifangda/claude-plugins/)
Score history
| Date | Version | Score |
|---|
| 2026-11-07 | 76d90e8 | 80 |