[{"data":1,"prerenderedAt":718},["ShallowReactive",2],{"announcement":3,"i-tabler:sun":11,"i-tabler:moon":16,"i-tabler:menu-2":18,"i-tabler:x":20,"i-simple-icons:youtube":22,"i-simple-icons:github":24,"i-simple-icons:x":26,"i-simple-icons:linkedin":28,"i-tabler:arrow-up-right":31,"post-fuzz-everything":33,"post-nav-fuzz-everything":696,"video-fuzz-everything":708,"i-tabler:copy":716},{"startsAt":4,"endsAt":5,"scramble":6,"cta":7,"message":10},"2026-10-13","2026-11-30","Cache Poisoning:",{"href":8,"label":9},"\u002Fcache-poisoning-the-cache-you-cant-purge","Read it","The cache you can't purge.",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":15},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0m-5 0h1m8-9v1m8 8h1m-9 8v1M5.6 5.6l.7.7m12.1-.7l-.7.7m0 11.4l.7.7m-12.1-.7l-.7.7\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":17},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 3h.393a7.5 7.5 0 0 0 7.92 12.446A9 9 0 1 1 12 2.992z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 6h16M4 12h16M4 18h16\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 6L6 18M6 6l12 12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":23},"\u003Cpath fill=\"currentColor\" d=\"M23.498 6.186a3.02 3.02 0 0 0-2.122-2.136C19.505 3.545 12 3.545 12 3.545s-7.505 0-9.377.505A3.02 3.02 0 0 0 .502 6.186C0 8.07 0 12 0 12s0 3.93.502 5.814a3.02 3.02 0 0 0 2.122 2.136c1.871.505 9.376.505 9.376.505s7.505 0 9.377-.505a3.02 3.02 0 0 0 2.122-2.136C24 15.93 24 12 24 12s0-3.93-.502-5.814M9.545 15.568V8.432L15.818 12z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":25},"\u003Cpath fill=\"currentColor\" d=\"M12 .297c-6.63 0-12 5.373-12 12c0 5.303 3.438 9.8 8.205 11.385c.6.113.82-.258.82-.577c0-.285-.01-1.04-.015-2.04c-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729c1.205.084 1.838 1.236 1.838 1.236c1.07 1.835 2.809 1.305 3.495.998c.108-.776.417-1.305.76-1.605c-2.665-.3-5.466-1.332-5.466-5.93c0-1.31.465-2.38 1.235-3.22c-.135-.303-.54-1.523.105-3.176c0 0 1.005-.322 3.3 1.23c.96-.267 1.98-.399 3-.405c1.02.006 2.04.138 3 .405c2.28-1.552 3.285-1.23 3.285-1.23c.645 1.653.24 2.873.12 3.176c.765.84 1.23 1.91 1.23 3.22c0 4.61-2.805 5.625-5.475 5.92c.42.36.81 1.096.81 2.22c0 1.606-.015 2.896-.015 3.286c0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":27},"\u003Cpath fill=\"currentColor\" d=\"M14.234 10.162L22.977 0h-2.072l-7.591 8.824L7.251 0H.258l9.168 13.343L.258 24H2.33l8.016-9.318L16.749 24h6.993zm-2.837 3.299l-.929-1.329L3.076 1.56h3.182l5.965 8.532l.929 1.329l7.754 11.09h-3.182z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":29,"hidden":30},"\u003Cpath fill=\"currentColor\" d=\"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037c-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85c3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.06 2.06 0 0 1-2.063-2.065a2.064 2.064 0 1 1 2.063 2.065m1.782 13.019H3.555V9h3.564zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0z\"\u002F>",true,{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":32},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M17 7L7 17M8 7h9v9\"\u002F>",{"id":34,"title":35,"body":36,"categories":682,"coverImage":685,"date":686,"description":687,"draft":14,"extension":688,"meta":689,"navigation":30,"noindex":14,"path":690,"readingTime":691,"seo":692,"slug":693,"stem":693,"updatedAt":694,"youtubeId":42,"__hash__":695},"blog\u002Ffuzz-everything.md","FUZZ Everything! 📂",{"type":37,"value":38,"toc":655},"minimark",[39,43,60,65,71,74,91,94,98,107,162,175,177,181,184,189,211,230,234,252,276,279,281,285,288,292,311,321,323,327,338,342,361,364,366,370,373,377,380,409,413,424,468,471,473,477,480,484,491,515,519,522,545,548,550,554,561,581,588,590,594,600,604,627,630,632,636,645,648,651],[40,41],"post-media",{"video":42},"xlQ5pvcvxYI",[44,45,46,47,51,52,55,56,59],"p",{},"Ever wanted to dig deep into websites, APIs, and directories to uncover hidden secrets? In the world of penetration testing, ",[48,49,50],"strong",{},"fuzzing"," is one of the most effective techniques for doing just that. Today, we’re diving into the concept of “",[48,53,54],{},"fuzz everything",",” exploring how to use ",[48,57,58],{},"ffuf"," to find all those buried endpoints, parameters, and backup files. Whether you’re experienced in bug bounty hunting or just starting your cybersecurity journey, ffuf is a tool you’ll want to have in your arsenal.",[61,62,64],"h2",{"id":63},"what-is-fuzzing","What is Fuzzing?",[44,66,67,68,70],{},"In simple terms, ",[48,69,50],{}," is the process of sending various inputs to an application to see how it reacts. It’s like testing every possible combination to find hidden vulnerabilities. You’re essentially throwing random (or structured) data at a target to see if anything interesting happens, sometimes leading to valuable discoveries.",[44,72,73],{},"In the context of security testing, fuzzing can help identify hidden directories, files, API endpoints, and parameters that aren't easily visible. These are the entry points that lead to valuable vulnerabilities, and fuzzing helps you find them before someone else does.",[44,75,76,86,87,90],{},[77,78,84],"a",{"href":79,"rel":80,"target":83},"https:\u002F\u002Fgithub.com\u002Fffuf\u002Fffuf?utm_source=amrelsagaei.com&utm_medium=referral",[81,82],"noopener","noreferrer","_blank",[48,85,58],{},", short for ",[48,88,89],{},"Fuzz Faster You Fool",": is one of the top tools for this task, built for speed and flexibility. So let’s jump into setting it up and using it effectively.",[92,93],"hr",{},[61,95,97],{"id":96},"setting-up-ffuf","Setting Up ffuf",[44,99,100,101,106],{},"First things first, installing ",[77,102,104],{"href":79,"rel":103,"target":83},[81,82],[48,105,58],{},". If you don’t already have it, follow these steps:",[108,109,110,114],"ol",{},[111,112,113],"li",{},"Open your terminal.",[111,115,116,117],{},"Clone the ffuf repository and install it by entering:",[118,119,124],"pre",{"code":120,"language":121,"meta":122,"className":123,"style":122},"git clone https:\u002F\u002Fgithub.com\u002Fffuf\u002Fffuf.git\ncd ffuf\ngo get\n","bash","","shiki shiki-themes vitesse-dark vitesse-light",[125,126,127,143,153],"code",{},[128,129,132,136,140],"span",{"class":130,"line":131},"line",1,[128,133,135],{"class":134},"swzfi","git",[128,137,139],{"class":138},"sRRDT"," clone",[128,141,142],{"class":138}," https:\u002F\u002Fgithub.com\u002Fffuf\u002Fffuf.git\n",[128,144,146,150],{"class":130,"line":145},2,[128,147,149],{"class":148},"s6_DI","cd",[128,151,152],{"class":138}," ffuf\n",[128,154,156,159],{"class":130,"line":155},3,[128,157,158],{"class":134},"go",[128,160,161],{"class":138}," get\n",[163,164,165],"blockquote",{},[44,166,167,170,171,174],{},[48,168,169],{},"Note",": Make sure ",[48,172,173],{},"Go"," is installed on your system, as ffuf requires it. Once installed, you’re all set to start fuzzing!",[92,176],{},[61,178,180],{"id":179},"finding-hidden-directories-and-files","Finding Hidden Directories and Files",[44,182,183],{},"One of the most common uses of fuzzing is to find hidden files or directories on a website. These hidden files can sometimes contain sensitive information or lead to vulnerable areas of the site.",[185,186,188],"h3",{"id":187},"basic-directory-fuzzing-command","Basic Directory Fuzzing Command",[118,190,192],{"code":191,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fexample.com\u002FFUZZ -w \u002Fpath\u002Fto\u002Fwordlist.txt\n",[125,193,194],{},[128,195,196,198,202,205,208],{"class":130,"line":131},[128,197,58],{"class":134},[128,199,201],{"class":200},"se4ZP"," -u",[128,203,204],{"class":138}," http:\u002F\u002Fexample.com\u002FFUZZ",[128,206,207],{"class":200}," -w",[128,209,210],{"class":138}," \u002Fpath\u002Fto\u002Fwordlist.txt\n",[212,213,214,224],"ul",{},[111,215,216,219,220,223],{},[125,217,218],{},"-u"," sets the target URL, with ",[48,221,222],{},"FUZZ"," as a placeholder where ffuf will try different values.",[111,225,226,229],{},[125,227,228],{},"-w"," points to the wordlist, which ffuf uses to test different file or directory names.",[185,231,233],{"id":232},"adding-file-extensions","Adding File Extensions",[44,235,236,237,240,241,240,244,247,248,251],{},"To make fuzzing even more effective, add common file extensions like ",[125,238,239],{},".php",", ",[125,242,243],{},".html",[125,245,246],{},".bak",", or ",[125,249,250],{},".zip"," to look for potential backups or hidden scripts:",[118,253,255],{"code":254,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fexample.com\u002FFUZZ -w \u002Fpath\u002Fto\u002Fwordlist.txt -e .bak,.php,.html\n",[125,256,257],{},[128,258,259,261,263,265,267,270,273],{"class":130,"line":131},[128,260,58],{"class":134},[128,262,201],{"class":200},[128,264,204],{"class":138},[128,266,207],{"class":200},[128,268,269],{"class":138}," \u002Fpath\u002Fto\u002Fwordlist.txt",[128,271,272],{"class":200}," -e",[128,274,275],{"class":138}," .bak,.php,.html\n",[44,277,278],{},"Adding extensions helps in finding backup files or sensitive scripts that may have been left exposed unintentionally.",[92,280],{},[61,282,284],{"id":283},"uncovering-api-endpoints","Uncovering API Endpoints",[44,286,287],{},"For bug bounty hunters and penetration testers, fuzzing APIs can be highly rewarding. This process can reveal hidden or undocumented endpoints.",[185,289,291],{"id":290},"command-for-api-endpoint-fuzzing","Command for API Endpoint Fuzzing",[118,293,295],{"code":294,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fapi.example.com\u002FFUZZ -w \u002Fpath\u002Fto\u002Fapi_wordlist.txt\n",[125,296,297],{},[128,298,299,301,303,306,308],{"class":130,"line":131},[128,300,58],{"class":134},[128,302,201],{"class":200},[128,304,305],{"class":138}," http:\u002F\u002Fapi.example.com\u002FFUZZ",[128,307,207],{"class":200},[128,309,310],{"class":138}," \u002Fpath\u002Fto\u002Fapi_wordlist.txt\n",[44,312,313,314,240,317,320],{},"In this setup, ffuf will scan for possible API endpoints like ",[125,315,316],{},"\u002Fadmin",[125,318,319],{},"\u002Fdev",", or others that might contain sensitive data or functionality.",[92,322],{},[61,324,326],{"id":325},"discovering-parameters","Discovering Parameters",[44,328,329,330,333,334,337],{},"Another powerful feature of ffuf is its ability to uncover hidden parameters. This is useful for testing various vulnerabilities, such as ",[48,331,332],{},"SQL Injection"," or ",[48,335,336],{},"Cross-Site Scripting (XSS)",".",[185,339,341],{"id":340},"fuzzing-for-parameters-command","Fuzzing for Parameters Command",[118,343,345],{"code":344,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fexample.com\u002Fsearch?FUZZ=value -w \u002Fpath\u002Fto\u002Fparameter_wordlist.txt\n",[125,346,347],{},[128,348,349,351,353,356,358],{"class":130,"line":131},[128,350,58],{"class":134},[128,352,201],{"class":200},[128,354,355],{"class":138}," http:\u002F\u002Fexample.com\u002Fsearch?FUZZ=value",[128,357,207],{"class":200},[128,359,360],{"class":138}," \u002Fpath\u002Fto\u002Fparameter_wordlist.txt\n",[44,362,363],{},"With this command, you can find hidden or undocumented parameters, giving you additional angles to test for vulnerabilities.",[92,365],{},[61,367,369],{"id":368},"using-custom-headers-and-post-data","Using Custom Headers and POST Data",[44,371,372],{},"ffuf allows you to customize your requests with headers and POST data, making it versatile for testing various scenarios. This is handy when authentication tokens are needed or when testing form inputs.",[185,374,376],{"id":375},"adding-custom-headers","Adding Custom Headers",[44,378,379],{},"For example, if you need to add an authorization token, you can use this command:",[118,381,383],{"code":382,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fexample.com\u002FFUZZ -w \u002Fpath\u002Fto\u002Fwordlist.txt -H Authorization: Bearer TOKEN\n",[125,384,385],{},[128,386,387,389,391,393,395,397,400,403,406],{"class":130,"line":131},[128,388,58],{"class":134},[128,390,201],{"class":200},[128,392,204],{"class":138},[128,394,207],{"class":200},[128,396,269],{"class":138},[128,398,399],{"class":200}," -H",[128,401,402],{"class":138}," Authorization:",[128,404,405],{"class":138}," Bearer",[128,407,408],{"class":138}," TOKEN\n",[185,410,412],{"id":411},"fuzzing-with-post-data","Fuzzing with POST Data",[44,414,415,416,419,420,423],{},"If you need to test POST requests, specify the HTTP method with ",[125,417,418],{},"-X POST"," and add the data payload using ",[125,421,422],{},"-d",":",[118,425,427],{"code":426,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fexample.com\u002Flogin -w \u002Fpath\u002Fto\u002Fwordlist.txt -X POST -d username=FUZZ&password=pass123\n",[125,428,429],{},[128,430,431,433,435,438,440,442,445,448,451,454,458,462,465],{"class":130,"line":131},[128,432,58],{"class":134},[128,434,201],{"class":200},[128,436,437],{"class":138}," http:\u002F\u002Fexample.com\u002Flogin",[128,439,207],{"class":200},[128,441,269],{"class":138},[128,443,444],{"class":200}," -X",[128,446,447],{"class":138}," POST",[128,449,450],{"class":200}," -d",[128,452,453],{"class":138}," username=FUZZ",[128,455,457],{"class":456},"somML","&",[128,459,461],{"class":460},"snInM","password",[128,463,464],{"class":456},"=",[128,466,467],{"class":138},"pass123\n",[44,469,470],{},"This command can be helpful for brute-forcing form fields or testing different input values.",[92,472],{},[61,474,476],{"id":475},"advanced-filtering-and-matching-techniques","Advanced Filtering and Matching Techniques",[44,478,479],{},"One of ffuf’s strengths is its ability to filter and match results based on specific criteria like status codes, response sizes, or regex patterns. This makes it easier to sift through responses and find the most relevant results.",[185,481,483],{"id":482},"matching-status-codes","Matching Status Codes",[44,485,486,487,490],{},"To see only responses with a particular HTTP status code, use the ",[125,488,489],{},"-mc"," flag:",[118,492,494],{"code":493,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fexample.com\u002FFUZZ -w \u002Fpath\u002Fto\u002Fwordlist.txt -mc 200\n",[125,495,496],{},[128,497,498,500,502,504,506,508,511],{"class":130,"line":131},[128,499,58],{"class":134},[128,501,201],{"class":200},[128,503,204],{"class":138},[128,505,207],{"class":200},[128,507,269],{"class":138},[128,509,510],{"class":200}," -mc",[128,512,514],{"class":513},"sUQhE"," 200\n",[185,516,518],{"id":517},"filtering-by-response-size","Filtering by Response Size",[44,520,521],{},"Sometimes, filtering by response size can be helpful, especially when the server returns the same status code for valid and invalid requests:",[118,523,525],{"code":524,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fexample.com\u002FFUZZ -w \u002Fpath\u002Fto\u002Fwordlist.txt -fs 1024\n",[125,526,527],{},[128,528,529,531,533,535,537,539,542],{"class":130,"line":131},[128,530,58],{"class":134},[128,532,201],{"class":200},[128,534,204],{"class":138},[128,536,207],{"class":200},[128,538,269],{"class":138},[128,540,541],{"class":200}," -fs",[128,543,544],{"class":513}," 1024\n",[44,546,547],{},"These options make it easy to zero in on the important results without being overwhelmed by irrelevant data.",[92,549],{},[61,551,553],{"id":552},"going-deeper-with-recursion","Going Deeper with Recursion",[44,555,556,557,560],{},"When you find a directory you want to explore further, ffuf’s ",[125,558,559],{},"-recursion"," flag lets you automatically go deeper into any directories it discovers.",[118,562,564],{"code":563,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fexample.com\u002FFUZZ -w \u002Fpath\u002Fto\u002Fwordlist.txt -recursion\n",[125,565,566],{},[128,567,568,570,572,574,576,578],{"class":130,"line":131},[128,569,58],{"class":134},[128,571,201],{"class":200},[128,573,204],{"class":138},[128,575,207],{"class":200},[128,577,269],{"class":138},[128,579,580],{"class":200}," -recursion\n",[44,582,583,584,587],{},"You can also set the recursion depth with ",[125,585,586],{},"-recursion-depth"," to control how many levels deep ffuf should search.",[92,589],{},[61,591,593],{"id":592},"integrating-proxies-for-better-control","Integrating Proxies for Better Control",[44,595,596,597,337],{},"Finally, ffuf can be run through a proxy, which is useful for logging requests or analyzing them with tools like ",[48,598,599],{},"Burp Suite",[185,601,603],{"id":602},"using-a-proxy","Using a Proxy",[118,605,607],{"code":606,"language":121,"meta":122,"className":123,"style":122},"ffuf -u http:\u002F\u002Fexample.com\u002FFUZZ -w \u002Fpath\u002Fto\u002Fwordlist.txt -x http:\u002F\u002F127.0.0.1:8080\n",[125,608,609],{},[128,610,611,613,615,617,619,621,624],{"class":130,"line":131},[128,612,58],{"class":134},[128,614,201],{"class":200},[128,616,204],{"class":138},[128,618,207],{"class":200},[128,620,269],{"class":138},[128,622,623],{"class":200}," -x",[128,625,626],{"class":138}," http:\u002F\u002F127.0.0.1:8080\n",[44,628,629],{},"Routing fuzzing traffic through a proxy lets you see each request in detail, giving you more insight and control.",[92,631],{},[61,633,635],{"id":634},"wrapping-up","Wrapping Up",[44,637,638,639,641,642,644],{},"That’s a comprehensive look at how to ",[48,640,54],{}," using ",[48,643,58],{},"!",[44,646,647],{},"Fuzzing is an essential skill for anyone serious about hacking, and ffuf is one of the best tools to make it fast and efficient. Mastering these techniques can help you uncover vulnerabilities that others might overlook.",[44,649,650],{},"If you have any questions or suggestions for future tutorials, drop them in the comments. Happy fuzzing, and Cheers🥂!",[652,653,654],"style",{},"html pre.shiki code .swzfi, html code.shiki .swzfi{--shiki-default:#80A665;--shiki-light:#59873A}html pre.shiki code .sRRDT, html code.shiki .sRRDT{--shiki-default:#C98A7D;--shiki-light:#B56959}html pre.shiki code .s6_DI, html code.shiki .s6_DI{--shiki-default:#B8A965;--shiki-light:#998418}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html pre.shiki code .se4ZP, html code.shiki .se4ZP{--shiki-default:#C99076;--shiki-light:#A65E2B}html pre.shiki code .somML, html code.shiki .somML{--shiki-default:#666666;--shiki-light:#999999}html pre.shiki code .snInM, html code.shiki .snInM{--shiki-default:#BD976A;--shiki-light:#B07D48}html pre.shiki code .sUQhE, html code.shiki .sUQhE{--shiki-default:#4C9A91;--shiki-light:#2F798A}",{"title":122,"searchDepth":155,"depth":155,"links":656},[657,658,659,663,666,669,673,677,678,681],{"id":63,"depth":145,"text":64},{"id":96,"depth":145,"text":97},{"id":179,"depth":145,"text":180,"children":660},[661,662],{"id":187,"depth":155,"text":188},{"id":232,"depth":155,"text":233},{"id":283,"depth":145,"text":284,"children":664},[665],{"id":290,"depth":155,"text":291},{"id":325,"depth":145,"text":326,"children":667},[668],{"id":340,"depth":155,"text":341},{"id":368,"depth":145,"text":369,"children":670},[671,672],{"id":375,"depth":155,"text":376},{"id":411,"depth":155,"text":412},{"id":475,"depth":145,"text":476,"children":674},[675,676],{"id":482,"depth":155,"text":483},{"id":517,"depth":155,"text":518},{"id":552,"depth":145,"text":553},{"id":592,"depth":145,"text":593,"children":679},[680],{"id":602,"depth":155,"text":603},{"id":634,"depth":145,"text":635},[683,684],"Bug Bounty","Penetration Testing","\u002Fimages\u002Fblog\u002Ffuzz-everything\u002Ffuzz-everything.webp","2024-11-02","How to use ffuf to fuzz everything: hidden directories, file extensions, API endpoints, parameters and backup files that normal recon never surfaces.","md",{},"\u002Ffuzz-everything",null,{"title":35,"description":687},"fuzz-everything","2025-02-05","RmxGvlTpSRN8LumhF5rxbz8Y7Wutkllhs3qS9Sf9f-Q",{"older":697,"newer":702,"total":707},{"slug":698,"title":699,"date":700,"position":701},"vpn-dpn-tor","VPN? 🔐 DPN? 🌍 TOR? 🧅","2024-10-21",40,{"slug":703,"title":704,"date":705,"position":706},"api-penetration-testing-pt1","API Penetration Testing 🔐","2024-11-14",38,68,{"id":42,"title":35,"published":709,"url":710,"description":711,"durationSeconds":712,"viewCount":713,"thumbnail":714,"thumbnailSrcset":715},"2024-11-03T14:00:55Z","https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=xlQ5pvcvxYI","Learn how to use Fuff to uncover hidden directories, API endpoints, parameters, and much more. From installation to advanced techniques like recursion and custom headers, this guide will turn you into a fuzzing pro.",1375,4113,"\u002Fimages\u002Fvideos\u002FxlQ5pvcvxYI-800.webp","\u002Fimages\u002Fvideos\u002FxlQ5pvcvxYI-800.webp 800w, \u002Fimages\u002Fvideos\u002FxlQ5pvcvxYI-1280.webp 1280w",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":717},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M7 9.667A2.667 2.667 0 0 1 9.667 7h8.666A2.667 2.667 0 0 1 21 9.667v8.666A2.667 2.667 0 0 1 18.333 21H9.667A2.667 2.667 0 0 1 7 18.333z\"\u002F>\u003Cpath d=\"M4.012 16.737A2 2 0 0 1 3 15V5c0-1.1.9-2 2-2h10c.75 0 1.158.385 1.5 1\"\u002F>\u003C\u002Fg>",1791941257976]