Automic VaultAutomic Vault

brew

ffuf mit Homebrew, apk, apt, dnf, MacPorts, Nix, scoop, winget installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für ffuf in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install ffuf

local Homebrew formula metadata

MacPortsverifiziert · 94%
sudo port install ffuf

MacPorts ports tree · security/ffuf/Portfile · Quelle: api.github.com

Linux

Alpine Linux apkverifiziert · 92%
sudo apk add ffuf

Alpine Linux edge package indexes · ffuf · Quelle: dl-cdn.alpinelinux.org

Debian aptverifiziert · 92%
sudo apt install ffuf

Debian stable package indexes · ffuf · Quelle: deb.debian.org

Fedora dnfverifiziert · 92%
sudo dnf install ffuf

Fedora Rawhide package metadata · ffuf · Quelle: dl.fedoraproject.org

Nixverifiziert · 92%
nix profile install nixpkgs#ffuf

nixpkgs package indexes · pkgs/by-name/ff/ffuf/package.nix · Quelle: api.github.com

Windows

Scoopverifiziert · 92%
scoop install main/ffuf

Scoop official bucket manifest trees · bucket/ffuf.json · Quelle: api.github.com

Windows Package Managerverifiziert · 92%
winget install --id ffuf.ffuf -e

Windows Package Manager source index · ffuf.ffuf · Quelle: cdn.winget.microsoft.com

Überblick

Paketzusammenfassung

Fast web fuzzer written in Go

Befehle und Aliase

  • ffuf

Verlauf

Projektgeschichte und Nutzung

ffuf is a Go-based web fuzzer whose name expands to Fuzz Faster U Fool. It became a standard CLI in web-security workflows because it makes content discovery, virtual-host discovery, parameter fuzzing, request mutation, filtering, replay, and automation fit into one fast binary.

Projektgeschichte

The GitHub project was created in November 2018, and the first release listed by the GitHub API is v0.1 on the same date. The README has consistently described the tool as a fast web fuzzer written in Go, with examples centered on the `FUZZ` keyword embedded in URLs, headers, and request bodies.

By the v2 release line, the README documented a broad set of operational features: recursive discovery, multiple matchers and filters, auto-calibration, rate limiting, request replay through a proxy, JSON output, external input commands, and an interactive mode.

Adoptionsgeschichte

ffuf is packaged widely for security practitioners, including Homebrew, Debian/Ubuntu, Fedora, MacPorts, Nix, Scoop, winget, and Alpine according to the package facts in this batch. The repository metadata also shows a large public GitHub audience for a focused security CLI.

Its adoption follows a familiar package-manager path for Go security tools: a single static-friendly executable, a clear upstream release page, documented `go install` support, and examples that map directly to common bug-bounty and penetration-testing tasks.

Wie es verwendet wird

The core usage pattern is `ffuf -w wordlist -u https://target/FUZZ`, then refine results with status-code, size, word, line, regex, or timing matchers and filters. The README also documents virtual-host fuzzing with a Host header, GET and POST parameter fuzzing, external mutators such as Radamsa, recursion, per-job time limits, and JSON output.

ffuf reads a default config file from `$XDG_CONFIG_HOME/ffuf/ffufrc` when present. Command-line options override values from that default file, while repeatable flags such as headers are appended.

Warum Paket-Nerds sich dafür interessieren

ffuf matters in package collections because it is a small, high-demand security tool with frequent real-world use and simple installation expectations. Users expect it to be present in developer laptops, security workstations, and reproducible lab environments without compiling Go code by hand.

Zeitleiste

  • 2018: GitHub project created and v0.1 released.
  • 2023: v2.1.0 released in the GitHub release stream cited for this record.
  • 2026: Repository metadata showed continued activity and broad public adoption.

Related projects

  • The README documents external mutator use with Radamsa and practice targets such as ffufme. In package culture it sits near other web-content discovery and fuzzing tools used by penetration testers.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
$XDG_CONFIG_HOME/ffuf/ffufrc

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
ffufcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version2.2.1
Manager aktualisiert2026-07-13
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv2.2.1

https://github.com/ffuf/ffuf

  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:ffuf
Version2.2.1
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/ffuf
Homepagehttps://github.com/ffuf/ffuf
Repositoryhttps://github.com/ffuf/ffuf
Upstream-Dokumentationhttps://github.com/ffuf/ffuf#readme
LizenzMIT
Quellarchivhttps://github.com/ffuf/ffuf/archive/refs/tags/v2.2.1.tar.gz
Zuletzt aktualisiert2026-07-13T18:25:39Z
Pulseupdated
Build-Abhängigkeitengo
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameffuf
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Debian apt95%

ffuf 2.1.0-1+b9

Fast web fuzzer written in Go (program)

https://github.com/ffuf/ffuf

sudo apt install ffuf
  • Section: devel
  • Architecture: amd64
  • Source Package: ffuf
  • 1 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Ffuf
Debian stable package indexes · deb.debian.org · Debian stable package indexes: ffuf from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

ffuf

nix profile install nixpkgs#ffuf
  • normalized package name match
  • Abgeglichen nach: Ffuf
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ff/ffuf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

ffuf 2.1.0-1

Fast web fuzzer written in Go (program)

https://github.com/ffuf/ffuf

sudo apt install ffuf
  • Section: universe/devel
  • Architecture: amd64
  • 1 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Ffuf
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: ffuf from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

ffuf 2.1.0-r22

fast web fuzzer written in Go

https://github.com/ffuf/ffuf

sudo apk add ffuf
  • License: MIT
  • Architecture: x86_64
  • Source Package: ffuf
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Ffuf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: ffuf from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

ffuf-doc 2.1.0-r22

fast web fuzzer written in Go (documentation)

https://github.com/ffuf/ffuf

sudo apk add ffuf-doc
  • License: MIT
  • Architecture: x86_64
  • Source Package: ffuf
  • normalized package name match
  • Abgeglichen nach: Ffuf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: ffuf-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

ffuf 2.1.0-7.fc44

Fast web fuzzer written in Go

https://github.com/ffuf/ffuf

sudo dnf install ffuf
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MIT
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: ffuf
  • 3 Abhängigkeiten
  • 2 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Ffuf
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: ffuf from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
MacPorts95%

ffuf

sudo port install ffuf
  • normalized package name match
  • Abgeglichen nach: Ffuf
MacPorts ports tree · api.github.com · MacPorts ports tree: security/ffuf/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/ffuf

scoop install main/ffuf
  • normalized package name match
  • Abgeglichen nach: Ffuf
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/ffuf.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

ffuf.ffuf

winget install --id ffuf.ffuf -e
  • normalized package name match
  • Abgeglichen nach: Ffuf
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: ffuf.ffuf from https://cdn.winget.microsoft.com/cache/source.msix

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

  • goBuild dependency declared by Homebrew.

Gleicher Workflow

  • dalfoxShares av.db curated category or tags: cli, security, web-security.
  • feroxbusterShares av.db curated category or tags: cli, security, web-security.
  • katanaShares av.db curated category or tags: cli, go, security, web-security.
  • anubisShares av.db curated category or tags: cli, security, web-security.
  • gobusterShares av.db curated category or tags: cli, go, security, web-security.
  • goshsShares av.db curated category or tags: cli, go, pentesting, security.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment