Why Filtering Matters
Fuzzing tools generate a large amount of output. Filtering helps remove noise (e.g., 404 pages) and highlights responses that are more likely to contain interesting findings.
Gobuster Filtering
| Flag |
Purpose |
-s |
Show only specified HTTP status codes |
-b |
Hide specified HTTP status codes |
--exclude-length |
Exclude responses of certain sizes |
Example
gobuster dir -u http://example.com -w wordlist.txt -s 200,301 --exclude-length 0
FFUF Filtering
Status Code Filters
| Flag |
Purpose |
-mc |
Match (show) specific status codes |
-fc |
Filter (hide) specific status codes |
Response Size
| Flag |
Purpose |
-ms |
Match response size |
-fs |
Filter response size |
Word Count
| Flag |
Purpose |
-mw |
Match word count |
-fw |
Filter word count |
Line Count
| Flag |
Purpose |
-ml |
Match line count |
-fl |
Filter line count |
Response Time
| Flag |
Purpose |
-mt |
Match Time-To-First-Byte (TTFB) |
Examples