Why is the -ac flag important in this skill?

The auto-calibration (-ac) flag is critical because it automatically filters out repetitive false positive responses, allowing Claude to analyze only meaningful results.

FFUF (Fuzz Faster U Fool) is a fast web fuzzer written in Go, used by security professionals to find hidden content and vulnerabilities.

How does this skill improve Claude's performance?

It provides domain-specific patterns and best practices that prevent the AI from generating noisy or inefficient fuzzing commands.

Can I use this skill for authenticated testing?

Yes, the skill provides specific guidance on using raw HTTP requests to fuzz authenticated endpoints while maintaining sessions and tokens.

FFUF Web Fuzzing

Name: FFUF Web Fuzzing
Author: prof-ramos

byprof-ramos

•

セキュリティとテスト

Accelerates web security testing by providing expert guidance for high-performance fuzzing, directory discovery, and vulnerability research.

This skill empowers Claude to act as a security expert for FFUF (Fuzz Faster U Fool), a high-speed web fuzzer used in penetration testing. It provides specialized knowledge for discovering hidden files, directories, and subdomains, while also guiding users through complex scenarios like authenticated fuzzing via raw HTTP requests. By emphasizing auto-calibration and strategic filtering, the skill helps eliminate noise, ensuring that security researchers and developers can focus on identifying real vulnerabilities and sensitive data exposures efficiently.

主な機能

01High-speed directory and file discovery using customizable wordlists

02Intelligent filtering and auto-calibration to reduce false positives

031 GitHub stars

04Multi-mode fuzzing strategies including clusterbomb and pitchfork

05Authenticated fuzzing support through raw HTTP request templates

06Advanced subdomain and virtual host enumeration techniques

ユースケース

01Automating the identification of subdomains and virtual hosts for large-scale attack surface mapping

02Performing mass parameter discovery to identify hidden API endpoints or potential IDORs

03Discovering unlinked administrative panels or backup files on a target web server

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add prof-ramos/.codex ffuf-skill

For use in Claude.ai and ChatGPT

Download Skill