ffuf

ffuf 2.3.0

A fast web fuzzer written in Go.

  • By ffuf
  • Open Source
  • Updated Sep 9, 2026
Download for Windows

About ffuf

A fast web fuzzer written in Go.

What's new in 2.3.0

Changelog

  • 256c1b0 Changelog: add v2.3.0, and backfill the v2.2.0 and v2.2.1 sections
  • 90e28bd Bound the -od/-audit-log response snapshot and the response header size (#934)
  • 33c67d2 Count response words/lines without allocating a []string (#930)
  • 8162f48 Add preflight/postflight requests with variable extraction (#920)
  • e43b4a2 Drop redundant security contact link from issue config (#919)
  • a614add Add YAML issue forms routing to the wiki (#918)
  • 89a493a Add SECURITY.md with a private disclosure policy (#917)
  • c9e30e8 Add CONTRIBUTING.md and link the wiki engineering docs (#916)
  • b3813a4 Fix interactive console being scrolled off screen by inflight results (#915)
  • 6658343 refactor: split pkg/ffuf into a kernel + pkg/engine (#914)
  • 047d6bf fix(scraper): FromDir reads its dirname argument, not the global SCRAPERDIR (#913)
  • a4c162c refactor: drop the single-implementation by-name factories (#912)
  • f9626f7 refactor(ffuf): extract recursion policy into a recursionManager (#911)
  • 517c359 Structural refactor: testable assembly, match seam, per-job context (#910)
  • e0e54ce Fix concurrency defects: MatcherManager, recursion queue, pause gate, and related races (#909)
  • b6b87a4 Testing suite: mock-target integration harness + engine race fixes (#906)
  • d06edaa fix: synchronize Stdoutput result accumulation (#908)
  • 4086e56 fix: autocalibration mutated the caller's input map (#907)
  • 8e9c5e6 Declarative flag/config architecture: add a flag = one tagged field (#904)
  • 0acfcc5 Fix terminal control characters leaking into redirected output (#905)
  • 70cbcc1 Add Winget and Scoop installation instructions (#797)
  • b0fbfb9 Updated README.md (#903)

Full release notes »

Technical details

Publisherffuf
AuthorJoona Hoikkala
Version2.3.0
Release date2026-09-09
LicenseMIT
Installer typezip
Architecturex86, x64, arm64
Package IDffuf.ffuf

Install ffuf from the command line

Install with Windows Package Manager
winget install --id=ffuf.ffuf -e
Update to the latest version
winget upgrade --id=ffuf.ffuf -e
Uninstall
winget uninstall --id=ffuf.ffuf -e

fuzzerinfosecpentestingweb

ffuf version history

  • 2.2.1
  • 2.2.0
  • 2.1.0
  • 2.0.0

Frequently asked questions

Is ffuf free?

Yes. ffuf is free and open-source software released under the MIT license.

What is the latest version of ffuf?

The latest version is 2.3.0, released on Sep 9, 2026.

Is it safe to download ffuf?

The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 091c8a22d0c7fbe07d343b3ae2c213dbd37b38a8a2ed40631fcd3128ea1764fb.

Which Windows versions does ffuf support?

ffuf runs on Windows and is available for 32-bit (x86), 64-bit (x64), ARM64 systems.

How do I uninstall ffuf?

Open Settings › Apps › Installed apps, find ffuf and select Uninstall. From the command line, run winget uninstall --id=ffuf.ffuf -e.