FFUF Agent Setup for Directory Discovery

ffuf Command

Using {{domain}} ReconNess replace {{domain}} for the subdomain.
If we have the wordlist in ~/Desktop/tools/wordlist/directories.txt
ffuf -w ~/Desktop/tools/wordlist/directories.txt -u https://{{domain}}/FUZZ -mc 200,204
This Agent run in each subdomain.

ffu Script

using ReconNess.Core.Models;
lineInput = lineInput.Replace("","");
var match = System.Text.RegularExpressions.Regex.Match(lineInput, @"(.*?)\[Status: (.*?), Size: (.*?),");
if (match.Success && match.Groups.Count == 4)
return new ScriptOutput
HttpDirectory = match.Groups[1].Value,
HttpDirectoryMethod = "GET",
HttpDirectoryStatusCode = match.Groups[2].Value,
HttpDirectorySize = match.Groups[3].Value,
return new ScriptOutput();
Check the Readme on GitHub to know more about the Script.

ffuf Dockerfile Entry

# -------- Agents dependencies --------
# To allow run ffuf inside the docker
RUN apt-get update && apt-get install -y git wget
RUN wget
RUN tar -C /usr/local -xzf go1.16.linux-amd64.tar.gz
RUN export GOPATH=$HOME/go
RUN export PATH=$PATH:/usr/local/go/bin:$GOPATH/bin
RUN /usr/local/go/bin/go get
# -------- End Agents dependencies --------

ffuf Command for Docker

/root/go/bin/ffuf -w /app/Content/wordlists/dir_enum/default.txt -u https://{{domain}}/FUZZ -mc 200,204