Gobuster vs Ffuf

Hi all!

So while working through Preignition (Very easy box), I noticed a discrepancy between my search results when I ran ffuf vs gobuster.

The first command I ran was ffuf -w ~/directory-list-2.3-small.txt:FUZZ -u http://hostip/FUZZ
and I ended up getting nothing back.

So then I ran - gobuster -w ~/directory-list-2.3-small.txt dir -u http://hostip -x .php,.html and ended up getting a page returned.

What’s with that!?

1 Like

you forgot to add .php or .html in your ffuf scan
for example ffuf -w ~/directory-list-2.3-small.txt:FUZZ -u http://hostip/FUZZ.php