RT @vxunderground@twitter.com

We have seen many tweets recently about silly malware concepts like "syscalls", "unhooking", or "obfuscation".

Here is our #1 #RedTeamTip to avoid EDRs. Use an RPG-7 to obliterate the computer. The EDR cannot detect your malware if the computer is not operational

🐦🔗: https://twitter.com/vxunderground/status/1613351605901860865

✨ ffuf(Fuzz Faster U Fool)

▶️Fest web fuzzer written in Go that allows typical directory discovery, virtual host discovery (without DNS records) and GET and POST parameter fuzzing

GitHub link:
https://github.com/ffuf/ffuf

▶️ Resources

👉 Comprehensive Guide on ffuf
https://www.hackingarticles.in/comprehensive-guide-on-ffuf/

👉 How to Fuzz Web Applications using FFuf – Web Security Tutorial

https://www.freecodecamp.org/news/web-security-fuzz-web-applications-using-ffuf/

👉Top 25 Example Usage of ffuf Web Fuzzer
https://allabouttesting.org/top-25-example-usage-of-ffuf-web-fuzzer/

👉 HOW TO FIND ZERO-DAY VULNERABILITIES WITH ffuf
https://www.securitynewspaper.com/2022/06/11/how-to-find-zero-day-vulnerabilities-with-fuzz-faster-u-fool-ffuf-detailed-free-fuzzing-tool-tutorial/

#infosec #ffuf #pentesting #bugbounty #bugbountytip #redteamtip #zeroday #kalilinux