#wfuzz

## Subdomain Fuzzing

### wfuzz

```
wfuzz -H "Host: FUZZ.domain" --hc 302,400 -c -z file,"/usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt" http://mentorquotes.htb/
```

## On SSRF

### Hidden Services Fuzzing

wfuzz -c -z range,1-65535 --hh 0 'HOST/ssrf?url="http://localhost:FUZZ/"'