Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

ffuf CLI Playbook — measured AI agent skill | DecimalAI

asdfgh1445/Strix•ffuf 用法

SkillScore95Maintained

Strix ffuf 模糊测试命令手册,覆盖匹配器、过滤器与自动化友好参数;触发名:strix-ffuf

Securityby asdfgh1445

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Security & AppSec pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/asdfgh1445-strix-ffuf/SKILL.md

decimalai skills pull asdfgh1445-strix-ffuf --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/asdfgh1445-strix-ffuf/SKILL.md https://app.decimal.ai/s/asdfgh1445-strix-ffuf/SKILL.md

Raw file: /s/asdfgh1445-strix-ffuf/SKILL.md ↗ · machine-readable summary at /s/asdfgh1445-strix-ffuf.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

22 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 4h ago

—+8% tokens0% turns95% of whole cases pass with skill (21/22)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-01	✗→✓	▲ Improved	15%	0%
case-03	✗→✓	▲ Improved	116%	0%
case-07	✗→✓	▲ Improved	-12%	0%
case-09	✗→✓	▲ Improved	10%	0%
case-14	✗→✓	▲ Improved	37%	0%

Showing 5 of 22 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

asdfgh1445 / ctf-super-hub

strix-ffuf/SKILL.md

View on GitHub ↗

License NOASSERTIONImported 8/3/2026Version v1

Skill contents

SKILL.md

ffuf CLI Playbook

Official docs:

https://github.com/ffuf/ffuf

Canonical syntax: ffuf -w <wordlist> -u <url_with_FUZZ> [flags]

High-signal flags:

-u <url> target URL containing FUZZ
-w <wordlist> wordlist input (supports KEYWORD mapping via -w file:KEYWORD)
-mc <codes> match status codes
-fc <codes> filter status codes
-fs <size> filter by body size
-ac auto-calibration
-t <n> threads
-rate <n> request rate
-timeout <seconds> HTTP timeout
-x <proxy_url> upstream proxy (HTTP/SOCKS)
-ignore-body skip downloading response body
-noninteractive disable interactive console mode
-recursion and -recursion-depth <n> recursive discovery
-H <header> custom headers
-X <method> and -d <body> for non-GET fuzzing
-o <file> -of <json|ejson|md|html|csv|ecsv> structured output

Agent-safe baseline for automation: ffuf -w wordlist.txt -u https://target.tld/FUZZ -mc 200,204,301,302,307,401,403,405 -ac -t 20 -rate 50 -timeout 10 -noninteractive -of json -o ffuf.json

Common patterns:

Basic path fuzzing:

ffuf -w /path/wordlist.txt -u https://target.tld/FUZZ -mc 200,204,301,302,307,401,403 -ac -t 40 -rate 200 -noninteractive

Vhost fuzzing:

ffuf -w vhosts.txt -u https://target.tld -H 'Host: FUZZ.target.tld' -fs 0 -ac -noninteractive

Parameter value fuzzing:

ffuf -w values.txt -u 'https://target.tld/search?q=FUZZ' -mc all -fs 0 -ac -t 30 -noninteractive

POST body fuzzing:

ffuf -w payloads.txt -u https://target.tld/login -X POST -H 'Content-Type: application/x-www-form-urlencoded' -d 'username=admin&password=FUZZ' -fc 401 -noninteractive

Recursive discovery:

ffuf -w dirs.txt -u https://target.tld/FUZZ -recursion -recursion-depth 2 -ac -t 30 -noninteractive

Proxy-instrumented run:

ffuf -w wordlist.txt -u https://target.tld/FUZZ -x http://127.0.0.1:48080 -mc 200,301,302,403 -ac -noninteractive

Critical correctness rules:

FUZZ must appear exactly at the mutation point in URL/header/body.
If using -w file:KEYWORD, that same KEYWORD must be present in URL/header/body.
Always include -noninteractive in agent/script execution to prevent ffuf console mode from swallowing subsequent shell commands.
Save structured output with -of json -o <file> for deterministic parsing.

Usage rules:

Prefer explicit matcher/filter strategy (-mc/-fc/-fs) over default-only output.
Start conservative (-rate, -t) and scale only if target tolerance is known.
Do not use -h/--help during normal execution unless absolutely necessary.

Failure recovery:

If ffuf drops into interactive mode, send C-c and rerun with -noninteractive.
If response noise is too high, tighten -mc/-fc/-fs instead of increasing load.
If runtime is too long, lower -rate/-t and tighten scope.

If uncertain, query web_search with: site:github.com/ffuf/ffuf <flag> README

Want to see if asdfgh1445/Strix•ffuf 用法 would activate on your phrasing? Try it before you install — no LLM call, no signup.

Other measured skills in the registry, with their headline benchmark lift.