Expert guidance for ffuf web fuzzing during authorized penetration testing. Covers directory discovery, subdomain enumeration, parameter fuzzing, authenticated fuzzing with raw requests, auto-calibration, and result analysis. Use when running ffuf scans, analyzing ffuf output, or building fuzzing strategies for web targets.
Install
npx skills add trailofbits/skills-curated --skill ffuf-web-fuzzingnpx skills add trailofbits/skills-curated --skill ffuf-web-fuzzing -a claude-code -gnpx skills add trailofbits/skills-curated --skill ffuf-web-fuzzing -a codex -ggemini skills install https://github.com/trailofbits/skills-curated.git --path plugins/ffuf-web-fuzzing/skills/ffuf-web-fuzzinggh skill install trailofbits/skills-curated ffuf-web-fuzzinggit clone --depth 1 https://github.com/trailofbits/skills-curated /tmp/trailofbits__skills-curated
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills-curated/plugins/ffuf-web-fuzzing/skills/ffuf-web-fuzzing ~/.claude/skills/ffuf-web-fuzzing # Claude Code
cp -R /tmp/trailofbits__skills-curated/plugins/ffuf-web-fuzzing/skills/ffuf-web-fuzzing ~/.agents/skills/ffuf-web-fuzzing # Codex, Cursor, Gemini CLI, Copilot, OpenCode