f
ffuf
Fast web fuzzer written in Go
Added 1 month ago
View Repository
Stars
0
Forks
0
Ethical Research & Authorized Use Only Compliance Notice
This security utility is indexed for educational purposes, defensive penetration testing, vulnerability reproduction, and authorized red team engagements. Unauthorized utilization against networks without prior explicit consent violates international cybersecurity regulations.
Description
Fast web fuzzer written in Go
Raw Intelligence Data
Fast web fuzzer written in GoRelease History
v2.3.0
09 Sep 2026 v2.3.0Changelog
- 256c1b02499f5f8672af965d4ad7a321d606bc65 Changelog: add v2.3.0, and backfill the v2.2.0 and v2.2.1 sections
- 90e28bd42efc4ee1f4e4645fc6920212ccd1ea2c Bound the -od/-audit-log response snapshot and the response header size (#934)
- 33c67d28c85b94589d029b3bcaff205a40cee9c4 Count response words/lines without allocating a []string (#930)
- 8162f48742ff140cafd0d8eb4f071714befccef5 Add preflight/postflight requests with variable extraction (#920)
- e43b4a239564e229d7469a957a8574bf25cc0fac Drop redundant security contact link from issue config (#919)
- a614addba3bf9327b115302dea1f5ac47a65c82a Add YAML issue forms routing to the wiki (#918)
- 89a493a1ca69c1c97ef3a0619880408f8d8a2507 Add SECURITY.md with a private disclosure policy (#917)
- c9e30e87c5c0c4826166507c656b9b6cc3b6f29f Add CONTRIBUTING.md and link the wiki engineering docs (#916)
- b3813a48ef35ee7ba326c22de1fd90f031272d71 Fix interactive console being scrolled off screen by inflight results (#915)
- 6658343f57113a821444256798f9663e519246ec refactor: split pkg/ffuf into a kernel + pkg/engine (#914)
- 047d6bf4fe63b0be4dfc516c0e2d499826c9b967 fix(scraper): FromDir reads its dirname argument, not the global SCRAPERDIR (#913)
- a4c162c6f04c04369e6733c0b367dcf243821d94 refactor: drop the single-implementation by-name factories (#912)
- f9626f7a08fc1d53b234ea72840a75ce656ac1d6 refactor(ffuf): extract recursion policy into a recursionManager (#911)
- 517c3593da9ebdd9219ca465767738a4a80b8be0 Structural refactor: testable assembly, match seam, per-job context (#910)
- e0e54ce8428db0297b3d1d6cb2dba58aa55ad188 Fix concurrency defects: MatcherManager, recursion queue, pause gate, and related races (#909)
- b6b87a4baed29cbb15994e882e8213b2c1f1f8f3 Testing suite: mock-target integration harness + engine race fixes (#906)
- d06edaabbfc04b9d019917ba68518a2e04b2d9d3 fix: synchronize Stdoutput result accumulation (#908)
- 4086e56e16eeadcf11c570170edd75e104cae3b6 fix: autocalibration mutated the caller's input map (#907)
- 8e9c5e65f655363d477b8ff5080f84130b66b5eb Declarative flag/config architecture: add a flag = one tagged field (#904)
- 0acfcc58de63062cf940d95d94ed9e0eddade4f6 Fix terminal control characters leaking into redirected output (#905)
- 70cbcc10ddbef10a66bce3aa473d4ea04700f63f Add Winget and Scoop installation instructions (#797)
- b0fbfb90b0ca54af54c079a2c761cdf1f78bde24 Updated README.md (#903)
v2.2.1
13 Jul 2026 v2.2.1Changelog
- 1571aa17535d8bfcf42258659a141df0b12efa51 Derive release version from git tag; git-
- for dev builds (#902)
About
Category
Security Tools & Arsenals
Indexed
Aug 19, 2026