Leaderboard/Security/ffuf_claude_skill
Last commit on October 16, 2025·Created on October 16, 2025

jthack/ffuf_claude_skill

Finds the endpoints the server won't list.
Combined rank
#699
across all skills
In Security
#29
category rank
Stars
211
0.0% in last 7d
Forks
20
0.0% in last 7d
Watchers
4
0.0% in last 7d
Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
TL;DR

This skill provides structured guidance for ffuf, the fast web fuzzer used in penetration testing. It covers directory discovery, subdomain enumeration, parameter fuzzing, and authenticated fuzzing with raw HTTP requests, with a strong emphasis on auto-calibration to filter false positives. Penetration testers, bug bounty hunters, and red team operators use it to systematically map hidden web content and test for vulnerabilities.

WHO IT'S FOR
Penetration Testers
discovering hidden web content
Bug Bounty Hunters
fuzzing for hidden endpoints
Security Researchers
analyzing web application attack surface
AI-Assisted Security Analysts
using AI to guide Web fuzzing
Repository contents

1 skill file

Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.

Use this skill

Follow the documented setup, then try a first task.

Install for Claude Code

Installs: The repository's ffuf-skill folder, containing the ffuf web-fuzzing skill · Claude Code

Before you start
  • ffuf installed on the system
  • Claude Desktop application
  • Appropriate authorization to test target systems
  1. From the directory where you want the ffuf_claude_skill repository folder created, clone the repository.

    git clone https://github.com/jthack/ffuf_claude_skill
  2. From that same directory, create Claude Code's skills directory and copy the cloned ffuf-skill folder into it.

    mkdir -p ~/.claude/skills
    cp -r ffuf_claude_skill/ffuf-skill ~/.claude/skills/
README.md · Checked Sep 18, 2026ffuf-skill/SKILL.md · Checked Sep 18, 2026

Give it something to do.

Suggested first task

Find common directories on an authorized website

Uses ffuf-web-fuzzing

  • Authorized target base URL
  • Explicit permission to test the target
  • Optional preferred wordlist
Use the ffuf-web-fuzzing skill to find common directories on <AUTHORIZED_BASE_URL>. Replace <AUTHORIZED_BASE_URL> with the base URL of a system I own or have explicit permission to test. Use safe defaults, help select an appropriate wordlist if needed, and summarize the results.
README.md · Checked Sep 18, 2026ffuf-skill/SKILL.md · Checked Sep 18, 2026