+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: How to use ffuf for high-performance blasting (/showthread.php?tid=6244884)
How to use ffuf for high-performance blasting - ZZY666 - Jun 25, 2023
How to use ffuf for high-performance burst format: ffuf u target address/FUZZ w dictionary？
RE: How to use ffuf for high-performance blasting - Dread.Reaper - Jun 25, 2023
(Jun 25, 2023 02:03 AM)ZZY666 Wrote: How to use ffuf for high-performance burst format: ffuf u target address/FUZZ w dictionary？
Give this a shot:
Increase the number of concurrent threads (-t): By default, FFUF uses 40 concurrent threads. You can increase this number to leverage more parallelism and improve performance. For example, -t 100 will use 100 threads.
Adjust the rate of requests per second (-rate): By default, the rate is set to 0, which means unlimited. You can set a specific rate to control the number of requests sent per second. For example, -rate 1000 will limit the rate to 1000 requests per second.
Enable HTTP/2 (-http2): HTTP/2 is a more efficient protocol compared to HTTP/1.1. If your target supports HTTP/2, enabling this option (-http2) can improve performance.
Use a proxy for replaying matched requests (-replay-proxy): If you want to replay matched requests using a proxy, specify the proxy URL using this option. For example, -replay-proxy http://127.0.0.1:8080 or -replay-proxy socks5://127.0.0.1:8080.
Adjust the timeout for HTTP requests (-timeout): The default timeout is set to 10 seconds. If you are targeting a network with high latency, you can increase the timeout value to avoid prematurely timing out requests. For example, -timeout 20 will set the timeout to 20 seconds.
Increase the number of words to test (-input-num): By default, FFUF tests 100 inputs. If you have a large wordlist and want to increase the performance, you can specify a higher value for -input-num. For example, -input-num 1000 will test 1000 inputs.
Adjust the maximum running time for the entire process (-maxtime): If you want to limit the overall running time of FFUF, you can set a maximum running time in seconds. For example, -maxtime 3600 will stop the process after 3600 seconds (1 hour).
Something like this:
Code
ffuf -w wordlist.txt -u https://example.org/FUZZ -t 100 -rate 1000 -http2 -timeout 20 -input-num 1000