ffuf -w /usr/share/wordlists/SecLists/Discovery/Web-Content/common.txt -u http://target_url/FUZZ #vhost discovery ffuf -w subdomains.txt -u http://target-or-ip/ -H "Host: FUZZ.target.com" #filter it out ffuf -w subdomains.txt -H "Host: FUZZ.target.com" -u http://target-or-ip -fs {size}
defined wordlist (kali)
- /usr/share/wordlists/SecLists/Discovery/DNS/namelist.txt