🐼
Hacking APIs
Ctrlk
  • How web application works?
  • The Anatomy of Web API
  • API Insecurities
  • Setting up an API hacking system
  • API Targets
  • Discovering APIs
  • Endpoint analysis
  • Vulnerabilities
  • Attacking API auth
  • Fuzzing
  • Exploiting API Auth
  • Exploting Mass Assignment
  • API Injection
  • AWS
  • Writeups
  • Misc
  • Tools
    • ffuf
      • Payloads
      • Before Fuzzing
      • Recursion
      • File Extensions
      • Using filters
      • Fuzzing parameters
      • Finding vhosts and subdomains
      • Proxifying ffuf traffic
    • wfuzz
    • jwt_tool
    • Hashcat
    • Common User Passwords Profiler
  • Resources
  • Wordpress API
  • Prevention
Powered by GitBook
On this page
  1. Tools
  2. ffuf

Payloads

https://github.com/danielmiessler/SecLists#install https://github.com/danielmiessler/SecLists/blob/master/Discovery/Web-Content/big.txt https://gist.github.com/0xrisec/a82521dabf52e1cc4d446ba5435aae19

PreviousffufNextBefore Fuzzing

Last updated 1 year ago