// what it is
Description
Old-school web fuzzer with deep payload generators, encoders, and filters. Slower than ffuf but more declarative for complex payloads. Still alive in Kali.
// use cases
What people use it for
- Complex parameter fuzzing
- Header fuzzing with chained encoders
// commands
The commands you'll type
Param fuzz
$ wfuzz -c -w wordlist.txt 'https://target/page?id=FUZZ' --hc 404