A collection of scripts that enable different kinds of payloads to be used with ffuf.
A script that generates base64 encoded combinations of username:password values in the provided wordlists. Iterates through every possible combination.
Test each HTTP basic authentication username:password combination in https://example.org/endpoint, and filter out 403 - Forbidden responses.
./ffuf_basicauth.sh usernames.txt passwords.txt |ffuf -w -:AUTH -u https://example.org/endpoint -H "Authorization: Basic AUTH" -fc 403 -c
We welcome any and all contributions. Please see ffuf_basicauth.sh for the preferred script header format for usage examples and author information.