ffuf: Extension (-e) does not add dot (.ext) in between the filename and the extension

when specifying an extension (-e) using a wordlist, the request combines the file name from the wordlist together with the extension supplied. For example, if I have a file name in my wordlist named info and I use the -e php attribute, the request will go to example.com/infophp instead of example.com/info.php

About this issue

Original URL
State: closed
Created 4 years ago
Reactions: 1
Comments: 15 (1 by maintainers)

Most upvoted comments

Hi buddy,

FFUF is a very very democratic software, different to some “File searchers”, FFUF allow you do FFUZ as you want… so…

Extensions normally are:

- .jsp
- .aspx
- .php
etc

but what happens when you want find rare extensions?

_php
__php
._php

So ffuf allow you to configure what kind of crazy extensions (and usage) you want.

Good hacking!.

bsysop on Aug 5, 2020

I just forgot to say…

Usage:

ffuf ... -e ".php,.asp,___php"

bsysop on Aug 5, 2020