{"id":"1cf9f374-4762-4d7e-b6dc-753090aeb8c7","shortId":"u22PG5","kind":"skill","title":"Fuzz web paths, parameters, and virtual hosts with ffuf to surface hidden attack surface","tagline":"Probe for hidden routes, parameter behaviors, and vhost exposures fast, before you spend time manually poking at the wrong surface.","description":"# Fuzz web paths, parameters, and virtual hosts with ffuf to surface hidden attack surface\n\nProbe for hidden routes, parameter behaviors, and vhost exposures fast, before you spend time manually poking at the wrong surface.\n\n## Prerequisites\n\nffuf binary, reachable target URL, wordlists, network access, operator-approved test scope\n\n## Installation\n\nRequirements and caveats from upstream:\n- Ffuf depends on Go 1.16 or greater.\n- You can also practise your ffuf scans against a live host with different lessons and use cases either locally by using the docker container https://github.com/adamtlangley/ffufme or against the live hosted version at...\n\nBasic usage or getting-started notes:\n- [Example usage](https://github.com/ffuf/ffuf#example-usage)\n- [Help](https://github.com/ffuf/ffuf#usage)\n- [Download](https://github.com/ffuf/ffuf/releases/latest) a prebuilt binary from [releases page](https://github.com/ffuf/ffuf/releases/latest), unpack and run!\n\n- Source: https://github.com/ffuf/ffuf\n- Extracted from upstream docs: https://raw.githubusercontent.com/ffuf/ffuf/HEAD/README.md\n\n## Documentation\n\n- https://github.com/ffuf/ffuf\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface/)","tags":["fuzz","web","paths","parameters","and","virtual","hosts","with","ffuf","surface","hidden","attack"],"capabilities":["skill","source-agentskillexchange","skill-fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,303 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:10:30.986Z","embedding":null,"createdAt":"2026-05-18T13:16:37.468Z","updatedAt":"2026-05-18T19:10:30.986Z","lastSeenAt":"2026-05-18T19:10:30.986Z","tsv":"'/adamtlangley/ffufme':122 '/ffuf/ffuf':165,176 '/ffuf/ffuf#example-usage)':141 '/ffuf/ffuf#usage)':145 '/ffuf/ffuf/head/readme.md':172 '/ffuf/ffuf/releases/latest)':149 '/ffuf/ffuf/releases/latest),':158 '/skills/fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface/)':183 '1.16':93 'access':77 'agent':178 'agentskillexchange.com':182 'agentskillexchange.com/skills/fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface/)':181 'also':98 'approv':80 'attack':13,47 'basic':130 'behavior':20,54 'binari':71,152 'case':112 'caveat':86 'contain':119 'depend':90 'differ':108 'doc':169 'docker':118 'document':173 'download':146 'either':113 'exampl':137 'exchang':180 'exposur':23,57 'extract':166 'fast':24,58 'ffuf':9,43,70,89,101 'fuzz':1,35 'get':134 'getting-start':133 'github.com':121,140,144,148,157,164,175 'github.com/adamtlangley/ffufme':120 'github.com/ffuf/ffuf':163,174 'github.com/ffuf/ffuf#example-usage)':139 'github.com/ffuf/ffuf#usage)':143 'github.com/ffuf/ffuf/releases/latest)':147 'github.com/ffuf/ffuf/releases/latest),':156 'go':92 'greater':95 'help':142 'hidden':12,17,46,51 'host':7,41,106,127 'instal':83 'lesson':109 'live':105,126 'local':114 'manual':29,63 'network':76 'note':136 'oper':79 'operator-approv':78 'page':155 'paramet':4,19,38,53 'path':3,37 'poke':30,64 'practis':99 'prebuilt':151 'prerequisit':69 'probe':15,49 'raw.githubusercontent.com':171 'raw.githubusercontent.com/ffuf/ffuf/head/readme.md':170 'reachabl':72 'releas':154 'requir':84 'rout':18,52 'run':161 'scan':102 'scope':82 'skill':179 'skill-fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface' 'sourc':162,177 'source-agentskillexchange' 'spend':27,61 'start':135 'surfac':11,14,34,45,48,68 'target':73 'test':81 'time':28,62 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'unpack':159 'upstream':88,168 'url':74 'usag':131,138 'use':111,116 'version':128 'vhost':22,56 'virtual':6,40 'web':2,36 'wordlist':75 'wrong':33,67","prices":[{"id":"4298c524-257a-4ba7-a8ad-2f022e88e026","listingId":"1cf9f374-4762-4d7e-b6dc-753090aeb8c7","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:16:37.468Z"}],"sources":[{"listingId":"1cf9f374-4762-4d7e-b6dc-753090aeb8c7","source":"github","sourceId":"agentskillexchange/skills/fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface","isPrimary":false,"firstSeenAt":"2026-05-18T13:16:37.468Z","lastSeenAt":"2026-05-18T19:10:30.986Z"}],"details":{"listingId":"1cf9f374-4762-4d7e-b6dc-753090aeb8c7","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"786264bd347fa53dadf610d6af88567ae6d7f901","skill_md_path":"skills/fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Fuzz web paths, parameters, and virtual hosts with ffuf to surface hidden attack surface","description":"Probe for hidden routes, parameter behaviors, and vhost exposures fast, before you spend time manually poking at the wrong surface."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/fuzz-web-paths-parameters-and-virtual-hosts-with-ffuf-to-surface-hidden-attack-surface"},"updatedAt":"2026-05-18T19:10:30.986Z"}}