### Install Rustup and Update

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Installs Rustup, the recommended Rust installer and version manager, and updates the toolchain. This is the first step to setting up a development environment.

```sh
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
rustup update
```

--------------------------------

### Setup for Test Coverage with grcov

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Installs grcov, configures Rust for coverage, and sets environment variables for collecting and generating test coverage reports. This setup is necessary for detailed test coverage analysis.

```sh
cargo install grcov
rustup component add llvm-tools
rustup install nightly
rustup default nightly
export CARGO_INCREMENTAL=0
export RUSTFLAGS="-Cinstrument-coverage -Clink-dead-code -Ccodegen-units=1 -Coverflow-checks=off"
export LLVM_PROFILE_FILE="target/debug/coverage/profraw/feroxbuster-%p-%m.profraw"
export RUSTDOCFLAGS="-Cpanic=abort"
rm -r target/debug/coverage/profraw
cargo build
cargo test
grkov . --source-dir . --keep-only "src/*" --binary-path ./target/debug/ -t html --branch --ignore-not-existing -o ./target/debug/coverage/
firefox target/debug/coverage/index.html
```

--------------------------------

### Install Caddy Web Server

Source: https://github.com/epi052/feroxbuster/blob/main/tests/policies/README.md

Instructions for installing the Caddy web server, which is a requirement for one of the integration tests.

```bash
sudo snap install caddy
```

```bash
sudo apt install caddy
```

--------------------------------

### Verify Cargo Installation

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Checks if the Cargo build tool is installed and accessible after setting up Rustup. Displays the installed Cargo version.

```shell
$> cargo --version
cargo 1.45.0 (744bd1fbb 2020-06-15)
```

--------------------------------

### Install Feroxbuster on Kali Linux

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Use this command for the preferred installation method on Kali Linux. It ensures proper configuration and integration.

```bash
sudo apt update && sudo apt install -y feroxbuster
```

--------------------------------

### Install Feroxbuster on Linux/macOS (Specific Directory)

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Installs feroxbuster to a specified directory using a shell script. Ensure the directory is in your PATH.

```bash
curl -sL https://raw.githubusercontent.com/epi052/feroxbuster/main/install-nix.sh | bash -s $HOME/.local/bin
```

--------------------------------

### Install Feroxbuster on Windows via Chocolatey

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Installs feroxbuster using the Chocolatey package manager on Windows.

```powershell
choco install feroxbuster
```

--------------------------------

### ferox-config.toml Configuration Example

Source: https://context7.com/epi052/feroxbuster/llms.txt

This TOML file demonstrates various configuration options for feroxbuster, including wordlist paths, thread counts, timeouts, filtering rules, and output settings. Place this file next to the binary, in the CWD, or in /etc/feroxbuster/.

```toml
# ferox-config.toml
wordlist = "/usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt"
threads = 50
timeout = 7
depth = 4
status_codes = [200, 204, 301, 302, 307, 308, 401, 403, 405]
filter_status = [404]
extract_links = true
save_state = true
user_agent = "feroxbuster/2.13.1"
output = "/tmp/results.txt"
json = false
proxy = "http://127.0.0.1:8080"
insecure = true
redirects = false
no_recursion = false
auto_bail = false
auto_tune = false
scan_limit = 0
rate_limit = 0
time_limit = "10m"
extensions = ["php", "html", "js"]
collect_extensions = false
collect_backups = false
collect_words = false
dont_filter = false
url_denylist = ["http://logout.example.com"]
regex_denylist = ["/admin/delete.*"]
scope = ["example.com", "api.example.com"]
filter_size = [5174]
filter_regex = ["^error$"]
filter_similar = ["https://example.com/soft-404"]
filter_word_count = [10]
filter_line_count = [3]
unique = false
response_size_limit = 4194304   # 4 MB default

[headers]
Authorization = "Bearer eyJ..."
X-Custom-Header = "value"
```

--------------------------------

### feroxbuster TOML Configuration Example

Source: https://context7.com/epi052/feroxbuster/llms.txt

This TOML file demonstrates a comprehensive set of configuration options for feroxbuster, covering scan parameters, filtering, output, and more. Ensure all paths and values are set according to your environment.

```toml
wordlist = "/usr/share/seclists/Discovery/Web-Content/raft-large-directories.txt"
threads = 50
timeout = 7
depth = 4
status_codes = [200, 204, 301, 302, 307, 308, 401, 403, 405]
filter_status = [404, 429]
extract_links = true
save_state = true
redirects = false
insecure = false
no_recursion = false
add_slash = false
dont_filter = false
auto_tune = false
auto_bail = false
collect_extensions = false
collect_backups = false
collect_words = false
scan_dir_listings = false
force_recursion = false
unique = false
json = false
quiet = false
silent = false
random_agent = false
scan_limit = 6
rate_limit = 0
parallel = 0
limit_bars = 0
verbosity = 0
response_size_limit = 4194304
time_limit = "30m"
output = "/tmp/ferox-results.txt"
debug_log = "/tmp/ferox-debug.log"
proxy = "http://127.0.0.1:8080"
replay_proxy = "http://127.0.0.1:8081"
replay_codes = [200, 302]
user_agent = "Mozilla/5.0 (compatible; SecurityScanner/1.0)"
extensions = ["php", "html", "js", "txt", "bak"]
methods = ["GET"]
url_denylist = ["https://example.com/logout", "https://example.com/delete"]
regex_denylist = ["/admin/remove.*", ".*\\?.*reset.*"]
scope = ["example.com", "api.example.com"]
filter_size = [5174, 1234]
filter_word_count = [10]
filter_line_count = [3, 4]
filter_regex = ["^Page Not Found$", "Access Denied"]
filter_similar = ["https://example.com/soft404"]
queries = [["token", "test"], ["debug", "false"]]
server_certs = ["/etc/ssl/certs/internal-ca.pem"]
client_cert = "/etc/ssl/client.pem"
client_key = "/etc/ssl/client.key"
protocol = "https"
dont_collect = ["png", "gif", "jpg", "jpeg", "ico", "woff", "woff2"]
backup_extensions = ["~", ".bak", ".old", ".orig"]

[headers]
Authorization = "Bearer eyJhbGciOiJIUzI1NiJ9..."
X-Forwarded-For = "127.0.0.1"
Accept = "application/json, text/html"
```

--------------------------------

### Install Feroxbuster on Windows via Winget

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Installs feroxbuster using the Windows Package Manager (winget).

```powershell
winget install epi052.feroxbuster
```

--------------------------------

### Install Feroxbuster on Linux/macOS (Current Directory)

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Installs feroxbuster to the current working directory using a shell script. This is useful for temporary or isolated usage.

```bash
curl -sL https://raw.githubusercontent.com/epi052/feroxbuster/main/install-nix.sh | bash
```

--------------------------------

### Feroxbuster Configuration File

Source: https://context7.com/epi052/feroxbuster/llms.txt

Example TOML configuration file for Feroxbuster. Configuration files are loaded from specific locations and can be overridden by CLI arguments.

```toml
# TOML configuration file content would go here, but is not provided in the source.
```

--------------------------------

### Install Feroxbuster on Windows x86_64

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Downloads, extracts, and verifies the feroxbuster executable for Windows x86_64 systems.

```powershell
Invoke-WebRequest https://github.com/epi052/feroxbuster/releases/latest/download/x86_64-windows-feroxbuster.exe.zip -OutFile feroxbuster.zip
Expand-Archive .\feroxbuster.zip
.\feroxbuster\feroxbuster.exe -V
```

--------------------------------

### Install Feroxbuster on macOS via Homebrew

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

A simple command to install feroxbuster using the Homebrew package manager on macOS.

```bash
brew install feroxbuster
```

--------------------------------

### Run Specific Feroxbuster Integration Tests

Source: https://github.com/epi052/feroxbuster/blob/main/tests/policies/README.md

Commands to run individual Feroxbuster integration tests for auto-bail functionality. The Python-based test requires no external dependencies, while the Caddy test requires Caddy to be installed.

```bash
cargo test integration_auto_bail_cancels_scan_with_timeouts --test test_integration_caddy -- --exact --ignored
```

```bash
cargo test integration_auto_bail_with_caddy --test test_integration_caddy -- --exact --ignored
```

--------------------------------

### Silent Mode and Piping Results with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Use --silent to print only discovered URLs, ideal for piping to other tools. Example shows piping to tee to save output.

```bash
feroxbuster -u https://example.com \
  --silent \
  -w wordlist.txt | tee discovered_urls.txt
```

--------------------------------

### Check Git Branch Status

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Verify that you are on the main branch and that your working directory is clean before starting maintenance tasks.

```sh
git status
On branch main
Your branch is up-to-date with 'origin/main'.

nothing to commit, working directory clean
```

--------------------------------

### Include Custom Headers

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Shows how to include custom headers, such as 'Accept' and 'Authorization', in the request.

```bash
./feroxbuster -u http://127.1 -H Accept:application/json "Authorization: Bearer {token}"
```

--------------------------------

### Specify Multiple Extensions

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Demonstrates how to specify multiple file extensions for scanning using various methods (single, comma-separated, space-separated).

```bash
./feroxbuster -u http://127.1 -x pdf -x js,html -x php txt json,docx
```

--------------------------------

### Collect Backup Files with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Employ --collect-backups to request common backup file extensions for every found URL. Custom backup extensions can be specified.

```bash
feroxbuster -u https://example.com \
  --collect-backups \
  -w wordlist.txt
```

```bash
feroxbuster -u https://example.com \
  --collect-backups ".backup,.orig,.save" \
  -w wordlist.txt
```

--------------------------------

### Set Up Upstream Remote

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Add the official feroxbuster repository as an 'upstream' remote. This allows you to pull changes from the main project.

```bash
$ git remote add upstream https://github.com/epi052/feroxbuster.git
```

--------------------------------

### Multiple Server Certificates

Source: https://context7.com/epi052/feroxbuster/llms.txt

Provide multiple server certificates for validation by specifying --server-cert multiple times.

```bash
feroxbuster -u https://example.com \
  --server-cert /certs/ca1.pem \
  --server-cert /certs/ca2.der \
  -w wordlist.txt
```

--------------------------------

### Follow Redirects (Scope-Aware)

Source: https://context7.com/epi052/feroxbuster/llms.txt

Enable following HTTP redirects with the --redirects flag. The --scope option restricts redirects to specified domains.

```bash
feroxbuster -u https://example.com \
  --redirects \
  --scope example.com staging.example.com \
  -w wordlist.txt
```

--------------------------------

### Custom User-Agent

Source: https://context7.com/epi052/feroxbuster/llms.txt

Set a custom User-Agent string for requests using the --user-agent flag.

```bash
feroxbuster -u https://example.com \
  --user-agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0)" \
  -w wordlist.txt
```

--------------------------------

### Run All Feroxbuster Integration Tests

Source: https://github.com/epi052/feroxbuster/blob/main/tests/policies/README.md

Command to execute all integration tests for Feroxbuster located in the test_integration_caddy file. These tests validate auto-bail and timeout handling against real servers.

```bash
cargo test --test test_integration_caddy -- --ignored
```

--------------------------------

### Verify Feroxbuster SHA512 Checksum (x86_64 Windows)

Source: https://github.com/epi052/feroxbuster/blob/main/choco_package/legal/VERIFICATION.txt

Use the 'checksum' command with the 'sha512' type to verify the integrity of the x86_64 Windows executable zip file. Ensure the file is in the current directory.

```bash
checksum -t sha512 -f .\x86_64-windows-feroxbuster.exe.zip
```

--------------------------------

### Thorough Scan with Directory Listing

Source: https://context7.com/epi052/feroxbuster/llms.txt

Combine --thorough with --scan-dir-listings for maximum discovery. The --thorough flag enables several other discovery-related options.

```bash
feroxbuster -u https://example.com \
  --thorough \
  -w wordlist.txt
```

--------------------------------

### Verify Feroxbuster SHA512 Checksum (x86 Windows)

Source: https://github.com/epi052/feroxbuster/blob/main/choco_package/legal/VERIFICATION.txt

Use the 'checksum' command with the 'sha512' type to verify the integrity of the x86 Windows executable zip file. Ensure the file is in the current directory.

```bash
checksum -t sha512 -f .\x86-windows-feroxbuster.exe.zip
```

--------------------------------

### Import Raw Burp Requests with `--request-file`

Source: https://context7.com/epi052/feroxbuster/llms.txt

Use the `--request-file` option to import a raw HTTP request from a file, such as one captured by Burp Suite. This request serves as a template for the scan. CLI flags can override values within the request file.

```bash
# Export a request from Burp Suite as a raw file, then:
feroxbuster --request-file /tmp/burp_request.txt -w wordlist.txt

# burp_request.txt example:
# GET /api/v1/FUZZ HTTP/1.1
# Host: example.com
# Authorization: Bearer token123
# User-Agent: Mozilla/5.0
# 
# (empty line terminates headers)

# CLI flags override values in the request file
feroxbuster --request-file /tmp/request.txt \
  -w wordlist.txt \
  --protocol https \
  -H "X-Extra: header"
```

--------------------------------

### Multi-Target Scanning with --stdin

Source: https://context7.com/epi052/feroxbuster/llms.txt

Read target URLs from standard input to scan multiple hosts. Combine with --parallel for independent child processes per target.

```bash
# Pipe targets from a file
cat targets.txt | feroxbuster --stdin -w wordlist.txt -t 50
```

```bash
# Pipe from subfinder/amass and scan in parallel (8 processes)
subfinder -d example.com -silent | \
  feroxbuster --stdin --parallel 8 \
    -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt \
    -o /tmp/results/
```

```bash
# targets.txt
# https://app.example.com
# https://api.example.com
# https://admin.example.com
```

```bash
# With --parallel and --output, feroxbuster creates a logs/ directory
# and writes per-target output files automatically:
# /tmp/results/logs/ferox-https_app_example_com.log
# /tmp/results/logs/ferox-https_api_example_com.log
```

--------------------------------

### JSON Output to File with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Direct JSON formatted scan results to a file using both the --json and -o options.

```bash
feroxbuster -u https://example.com \
  --json \
  -o /tmp/results.json \
  -w wordlist.txt
```

--------------------------------

### Parallel Multi-Process Scanning with --parallel

Source: https://context7.com/epi052/feroxbuster/llms.txt

Spawn multiple feroxbuster processes concurrently, each scanning a target URL read from stdin. Each child process inherits CLI flags except --stdin and --parallel.

```bash
# Scan 4 targets simultaneously, each with a 5-minute time limit
echo -e "https://site1.com\nhttps://site2.com\nhttps://site3.com\nhttps://site4.com" | \
  feroxbuster --stdin \
    --parallel 4 \
    --time-limit 5m \
    -w wordlist.txt \
    -o scan_results.txt \
    --json
```

--------------------------------

### feroxbuster Typical Penetration Testing Workflow

Source: https://context7.com/epi052/feroxbuster/llms.txt

This section outlines a common workflow for using feroxbuster in penetration testing and bug bounty hunting. It includes steps for initial reconnaissance, deep scanning with Burp Suite integration, and piping results to other tools.

```bash
# Step 1: Quick initial recon
feroxbuster -u https://target.com \
  -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt \
  -t 50 -d 2 --quiet
```

```bash
# Step 2: Deep thorough scan with Burp integration
feroxbuster -u https://target.com \
  --thorough \
  --burp \
  --replay-codes 200 302 401 403 \
  -w /usr/share/seclists/Discovery/Web-Content/raft-large-directories.txt \
  -x php html js txt conf bak \
  -t 100 \
  --scan-limit 8 \
  --time-limit 2h \
  -o /tmp/target-full.txt \
  --json
```

```bash
# Step 3: Pipeline — discovered URLs to further testing tools
feroxbuster -u https://target.com --silent -s 200 -w wordlist.txt | \
  httpx -title -tech-detect -status-code | \
  tee /tmp/live-endpoints.txt
```

```bash
# Step 4: Multi-target bug bounty sweep
cat scope.txt | feroxbuster --stdin \
  --parallel 10 \
  --smart \
  --time-limit 15m \
  -w wordlist.txt \
  -o /tmp/bugbounty-results/
```

--------------------------------

### Run Feroxbuster with mTLS

Source: https://github.com/epi052/feroxbuster/blob/main/tests/mutual-auth/README.md

Use this command to run Feroxbuster against a server configured for mutual TLS. Ensure you provide the correct paths to your client key and certificate.

```bash
feroxbuster -u https://localhost:8001 --client-key certs/client/client.key --client-cert certs/client/client.crt
```

--------------------------------

### Append Query Parameters

Source: https://context7.com/epi052/feroxbuster/llms.txt

Add query parameters to every request using the --query flag. Multiple --query flags can be used.

```bash
feroxbuster -u https://example.com \
  --query token=abc123 \
  --query debug=true \
  -w wordlist.txt
# Generates: https://example.com/WORD?token=abc123&debug=true
```

--------------------------------

### Checkout Main Branch

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Ensure you are on the 'main' branch before rebasing. If not, checkout the 'main' branch.

```bash
$ git checkout main
```

--------------------------------

### Basic feroxbuster Scan

Source: https://context7.com/epi052/feroxbuster/llms.txt

Perform a minimal scan using the default wordlist and 50 threads. Specify a wordlist, thread count, and file extensions for more targeted scans.

```bash
# Minimal scan — uses default wordlist and 50 threads
feroxbuster -u https://example.com
```

```bash
# Specify wordlist, thread count, and file extensions
feroxbuster -u https://example.com \
  -w /usr/share/seclists/Discovery/Web-Content/raft-large-directories.txt \
  -t 100 \
  -x php,html,js,txt
```

```bash
# Expected output (stderr for banner, stdout for results):
# 200      GET   142l     498w    5897c https://example.com/
# 200      GET    18l      64w     738c https://example.com/admin/
# 301      GET     9l      28w     309c https://example.com/api -> https://example.com/api/
# 403      GET    11l      32w     296c https://example.com/.htaccess
```

--------------------------------

### Proxy and Burp Suite Integration for Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Route traffic through a proxy using `--proxy` or the `--burp` shortcut. `--burp` enables `--insecure`. Use `--replay-proxy` to send specific responses to another proxy.

```bash
# Route through Burp Suite
feroxbuster -u https://example.com \
  --burp \
  -w wordlist.txt

# Equivalent explicit form
feroxbuster -u https://example.com \
  --proxy http://127.0.0.1:8080 \
  --insecure \
  -w wordlist.txt

# Replay only 200 and 302 responses to a secondary Burp listener
feroxbuster -u https://example.com \
  --replay-proxy http://127.0.0.1:8081 \
  --replay-codes 200 302 \
  -w wordlist.txt

# SOCKS5 proxy (with DNS resolution through proxy)
feroxbuster -u http://internal.corp \
  --proxy socks5h://127.0.0.1:9050 \
  -w wordlist.txt
```

--------------------------------

### Enable Directory Listing Scanning

Source: https://context7.com/epi052/feroxbuster/llms.txt

Enable recursive scanning of discovered directory listings using --scan-dir-listings. This flag helps in discovering files and directories within server-exposed directory indexes.

```bash
feroxbuster -u https://example.com \
  --scan-dir-listings \
  -w wordlist.txt
```

--------------------------------

### Smart and Thorough Scan Modes in Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Use --smart for a combination of backup and word collection with auto-tuning. Use --thorough for maximum discovery including extensions, backups, words, and directory listing scans.

```bash
feroxbuster -u https://example.com --smart -w wordlist.txt
```

```bash
feroxbuster -u https://example.com --thorough -w wordlist.txt
```

--------------------------------

### Auto-Tune Request Rate with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Enable adaptive rate adjustment with --auto-tune, which automatically reduces the request rate when a high server error ratio is detected.

```bash
feroxbuster -u https://example.com \
  --auto-tune \
  -w wordlist.txt
```

--------------------------------

### Run Clippy for Static Code Analysis

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Lints the Feroxbuster codebase using Clippy, a Rust linter. This command enforces coding standards and helps maintain a clean codebase. All linting errors must be addressed before submitting a Pull Request.

```sh
cargo clippy --all-targets --all-features -- -D warnings -A clippy::mutex-atomic
```

--------------------------------

### Pass Authentication Token via Query Parameter

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Includes an authentication token as a query parameter in the request URL.

```bash
./feroxbuster -u http://127.1 --query token=0123456789ABCDEF
```

--------------------------------

### Mutual TLS Authentication

Source: https://context7.com/epi052/feroxbuster/llms.txt

Configure client certificate and key for mutual TLS authentication using --client-cert and --client-key.

```bash
feroxbuster -u https://mtls.example.com \
  --client-cert /path/to/client.pem \
  --client-key /path/to/client.key \
  -w wordlist.txt
```

--------------------------------

### Combine Rate and Time Limits in Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Combine explicit rate limiting with time limits for controlled and predictable scan durations and throughput.

```bash
feroxbuster -u https://example.com \
  --rate-limit 100 \
  --time-limit 1h \
  -w wordlist.txt
```

--------------------------------

### Clone feroxbuster Fork

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Clone your forked repository of feroxbuster to your local machine. Replace 'your_username' with your actual GitHub username.

```bash
$ git clone https://github.com/your_username/feroxbuster.git
```

--------------------------------

### Random User-Agent

Source: https://context7.com/epi052/feroxbuster/llms.txt

Utilize a random User-Agent from a built-in list for each request with the --random-agent flag.

```bash
feroxbuster -u https://example.com \
  --random-agent \
  -w wordlist.txt
```

--------------------------------

### Write Debug Logs to File with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Capture detailed debug logs to a specified file using the --debug-log option in conjunction with -vvv.

```bash
feroxbuster -u https://example.com \
  -vvv \
  --debug-log /tmp/ferox-debug.log \
  -w wordlist.txt
```

--------------------------------

### feroxbuster Interactive Scan Management Menu

Source: https://context7.com/epi052/feroxbuster/llms.txt

Pressing Enter during an active feroxbuster scan opens an interactive menu for managing scans. This menu allows pausing, resuming, cancelling scans, or adding new URLs without restarting the tool. Ctrl+C saves the current state for later resumption.

```bash
# While feroxbuster is running, press ENTER to open:
#
# ──────────────────────── Scan Management ─────────────────────────
#  1 - List Scans            (show all active/queued scan URLs)
#  2 - Pause a Scan          (pause a specific directory scan)
#  3 - Resume a Scan         (resume a paused scan)
#  4 - Cancel a Scan         (cancel a specific scan entirely)
#  5 - Add a new URL to Scan (add a new target directory mid-scan)
#  q - Back to normal output
# ──────────────────────────────────────────────────────────────────

# Ctrl+C saves current state to a .state file for later --resume-from
```

--------------------------------

### Collect Extensions with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Use --collect-extensions to automatically discover and add file extensions found in responses to the scan. Ignored extensions can be filtered using --dont-collect.

```bash
feroxbuster -u https://example.com \
  --collect-extensions \
  -w wordlist.txt
```

--------------------------------

### Push New Branch to GitHub

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Push your newly created local branch to your GitHub fork. This makes your branch available for pull requests.

```bash
$ git push origin [name_of_your_new_branch]
```

--------------------------------

### Run Feroxbuster Tests

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Executes the test suite for the Feroxbuster project. Ensure all tests pass before submitting changes.

```sh
$ cd ~/projects/feroxbuster
$ cargo test
```

--------------------------------

### Filtering Silent Output with grep and cut

Source: https://context7.com/epi052/feroxbuster/llms.txt

Demonstrates piping silent Feroxbuster output through standard Unix tools like grep and cut for advanced filtering and data extraction.

```bash
feroxbuster -u https://example.com --silent -s 200 -w wordlist.txt | \
  grep "\.php$" | \
  cut -d' ' -f1
```

--------------------------------

### Hard Rate Limiting in Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Set a maximum number of requests per second per directory using the --rate-limit option for precise throughput control.

```bash
feroxbuster -u https://example.com \
  --rate-limit 250 \
  -w wordlist.txt
```

--------------------------------

### Resume Interrupted Feroxbuster Scans

Source: https://context7.com/epi052/feroxbuster/llms.txt

Use the `--resume-from` flag to continue a scan that was interrupted. The state file contains configuration and previously discovered results. You can override existing flags when resuming.

```bash
# feroxbuster auto-saves state on Ctrl+C to a file like:
# ferox-https_example_com-1693000000.state

# Resume the interrupted scan
feroxbuster --resume-from ferox-https_example_com-1693000000.state

# Optionally override flags when resuming (e.g., slow down the rate)
feroxbuster --resume-from ferox-https_example_com-1693000000.state \
  --rate-limit 50 \
  --threads 10

# State file is NDJSON; first line is the Configuration, subsequent lines are scan results
# {"type":"configuration","wordlist":"...","target_url":"https://example.com",...}
# {"type":"result","url":"https://example.com/admin/","status":200,...}
```

--------------------------------

### Create New Git Branch

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Create a new branch locally for your specific issue or feature. Replace '[name_of_your_new_branch]' with a descriptive name, often including the issue number.

```bash
$ git checkout -b [name_of_your_new_branch]
```

--------------------------------

### Add Staged Files for Commit

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Stage modified files for the next commit. Use 'git add .' cautiously to add all unstaged files.

```sh
git add path/to/filename.ext
```

```sh
git add .
```

--------------------------------

### feroxbuster Integration with Pipelines (NDJSON Output)

Source: https://context7.com/epi052/feroxbuster/llms.txt

feroxbuster can be integrated into automated pipelines using its NDJSON output format, stdin target support, and resume capability. The `--json` flag produces machine-parseable records, and `--silent` cleans stdout for Unix pipe chaining.

```bash
# Parse NDJSON output with jq — extract only 200 URLs
feroxbuster -u https://example.com --json --silent -w wordlist.txt | \
  jq -r 'select(.type == "result" and .status == 200) | .url'
```

```bash
# Filter results by extension
feroxbuster -u https://example.com --json --silent -w wordlist.txt | \
  jq -r 'select(.type == "result" and (.url | test("\\.php$"))) | .url'
```

```bash
# Extract scan statistics at end of run
feroxbuster -u https://example.com --json --silent -w wordlist.txt | \
  jq 'select(.type == "statistics")'
# {"type":"statistics","total_requests":15420,"errors":12,"successes":234,...}
```

--------------------------------

### IPv6 Scan with Disabled Recursion and Verbose Logging

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Performs a scan against an IPv6 address, disables recursive scanning, and enables INFO-level logging.

```bash
./feroxbuster -u http://[::1] --no-recursion -vv
```

--------------------------------

### Force Recursion with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Use --force-recursion to enable recursion even for responses that do not clearly indicate a directory. This can be combined with --depth.

```bash
feroxbuster -u https://example.com \
  --force-recursion \
  --depth 3 \
  -w wordlist.txt
```

--------------------------------

### Trust Custom Root CA

Source: https://context7.com/epi052/feroxbuster/llms.txt

Specify a custom server certificate using --server-cert to trust a specific Certificate Authority.

```bash
feroxbuster -u https://internal.corp \
  --server-cert /etc/ssl/certs/internal-ca.pem \
  -w wordlist.txt
```

--------------------------------

### Custom HTTP Methods, Headers, Cookies, and POST Data in Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Configure custom HTTP methods, headers, cookies, and request bodies. Supports JSON and URL-encoded body data with automatic Content-Type injection. Use `--data-json` or `--data-urlencoded` for POST requests.

```bash
# Custom HTTP headers and cookies
feroxbuster -u https://example.com \
  -H "Authorization: Bearer eyJhbGci..." \
  -H "X-API-Key: secret123" \
  -b "session=abc123; user=admin" \
  -w wordlist.txt

# POST scan with JSON body (--data-json implies -m POST)
feroxbuster -u https://api.example.com/v1/ \
  --data-json '{"query": "FUZZ"}' \
  -w wordlist.txt
# Content-Type: application/json is set automatically

# POST scan with URL-encoded body (read body from file)
feroxbuster -u https://example.com/login \
  --data-urlencoded @post_body.txt \
  -w wordlist.txt
# post_body.txt: username=admin&password=FUZZ
# Content-Type: application/x-www-form-urlencoded is set automatically

# Raw data (bytes as-is)
feroxbuster -u https://example.com \
  --data '{"search": "test"}' \
  -m POST \
  -H "Content-Type: application/json" \
  -w wordlist.txt

# Multiple HTTP methods (scans each word with both GET and POST)
feroxbuster -u https://example.com \
  -m GET POST \
  -w wordlist.txt
```

--------------------------------

### Filter Feroxbuster Results by Size, Words, Lines, and Regex

Source: https://context7.com/epi052/feroxbuster/llms.txt

Apply fine-grained filtering based on response size in bytes (`--filter-size`), word count (`--filter-words`), line count (`--filter-lines`), or regex matching against the response body.

```bash
# Filter out responses that are exactly 5174 bytes (common soft-404 size)
feroxbuster -u https://example.com \
  --filter-size 5174 \
  -w wordlist.txt

# Filter out responses with exactly 993 words
feroxbuster -u https://example.com \
  --filter-words 993 \
  -w wordlist.txt

# Filter out responses with exactly 35 or 36 lines
feroxbuster -u https://example.com \
  --filter-lines 35 36 \
  -w wordlist.txt
```

--------------------------------

### Read URLs from STDIN and Pipe Output

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Reads target URLs from standard input, performs a silent scan for specific status codes, and pipes the resulting URLs to another tool.

```bash
cat targets | ./feroxbuster --stdin --silent -s 200 301 302 --redirects -x js | fff -s 200 -o js-files
```

--------------------------------

### JSON Output with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Enable NDJSON output to stdout using the --json flag. This format provides structured data for each scan event.

```bash
feroxbuster -u https://example.com \
  --json \
  -w wordlist.txt
```

--------------------------------

### Collect Words from Responses with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Utilize --collect-words to extract words from response bodies and add them to the live wordlist for further scanning.

```bash
feroxbuster -u https://example.com \
  --collect-words \
  -w wordlist.txt
```

--------------------------------

### Limit Concurrent Directory Scans with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Control the number of concurrent directory scans using the --scan-limit option to manage server load.

```bash
feroxbuster -u https://example.com \
  --scan-limit 6 \
  -w wordlist.txt
```

--------------------------------

### Auto-Bail on High Error Ratio with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Configure the scan to abort automatically when the error ratio exceeds a defined threshold (default 90%) using the --auto-bail option.

```bash
feroxbuster -u https://example.com \
  --auto-bail \
  -w wordlist.txt
```

--------------------------------

### Write Scan Results to File with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Save scan results and state to a specified file using the -o option. This allows for resuming scans with --resume-from.

```bash
feroxbuster -u https://example.com \
  -o /tmp/scan_results.txt \
  -w wordlist.txt
```

--------------------------------

### Run Feroxbuster in Docker Container

Source: https://context7.com/epi052/feroxbuster/llms.txt

Execute Feroxbuster using a Docker container, suitable for CI/CD environments. Ensure the target URL, wordlist path, and desired threads are specified.

```bash
docker run --rm epi052/feroxbuster \
  -u https://target.example.com \
  -w /usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt \
  --json --silent \
  -t 50
```

--------------------------------

### Rebase from Upstream

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Pull changes from the upstream repository's main branch and rebase your local main branch. This keeps your local history clean.

```bash
$ git pull --rebase upstream main
```

--------------------------------

### Proxy Traffic Through Burp Suite

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Configures feroxbuster to proxy all traffic through Burp Suite running on localhost:8080. Use --insecure to bypass SSL certificate validation if needed.

```bash
./feroxbuster -u http://127.1 --insecure --proxy http://127.0.0.1:8080
```

--------------------------------

### Combine Multiple Filter Types

Source: https://context7.com/epi052/feroxbuster/llms.txt

Combine various filtering options like size, word count, regex, and status codes for precise noise reduction. Ensure the wordlist is provided with -w.

```bash
feroxbuster -u https://example.com \
  --filter-size 1234 \
  --filter-words 10 \
  --filter-regex "Not Found" \
  -C 404 \
  -w wordlist.txt
```

--------------------------------

### Commit Staged Changes

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Commit your staged changes with a brief, descriptive message. This records your progress.

```sh
git commit -m "Brief description of commit"
```

--------------------------------

### Control Recursion Depth with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Adjust the recursion depth using the --depth option. Set to 0 for infinite recursion or --no-recursion for a flat scan.

```bash
feroxbuster -u https://example.com \
  --depth 2 \
  -w wordlist.txt
```

```bash
feroxbuster -u https://example.com \
  --no-recursion \
  -w wordlist.txt
```

--------------------------------

### Deduplicate Responses by Similarity

Source: https://context7.com/epi052/feroxbuster/llms.txt

Filter out nearly identical responses using the --unique flag. Combine with --filter-similar for enhanced deduplication against a reference URL.

```bash
feroxbuster -u https://example.com \
  --unique \
  -w wordlist.txt

# Combined with --filter-similar for robust deduplication
feroxbuster -u https://example.com \
  --unique \
  --filter-similar https://example.com/soft-404-example \
  -w wordlist.txt
```

--------------------------------

### Filter Feroxbuster Results by Status Codes

Source: https://context7.com/epi052/feroxbuster/llms.txt

Control which HTTP status codes are reported using an allow-list (`-s`) or a deny-list (`-C`). These options are mutually exclusive. The default behavior reports all status codes from 200 to 599.

```bash
# Allow-list: only report 200, 301, 302, 403
feroxbuster -u https://example.com \
  -s 200 301 302 403 \
  -w wordlist.txt

# Deny-list: report everything EXCEPT 404 and 429
feroxbuster -u https://example.com \
  -C 404 429 \
  -w wordlist.txt

# Default behavior reports all status codes (200–599 range)
# Expected output when filtering 404:
# 200      GET   142l     498w    5897c https://example.com/index.php
# 301      GET     9l      28w     309c https://example.com/admin
# 403      GET    11l      32w     296c https://example.com/.git/
```

--------------------------------

### Scheduled Feroxbuster Scan with Result Diffing

Source: https://context7.com/epi052/feroxbuster/llms.txt

Schedule a Feroxbuster scan on a Kali-based system to run daily, outputting results in JSON format. Use the 'diff' command to compare the current scan results with the previous day's.

```bash
feroxbuster -u https://example.com \
  --json \
  --silent \
  -w wordlist.txt \
  -o /var/log/ferox/$(date +%Y%m%d).json
diff /var/log/ferox/yesterday.json /var/log/ferox/$(date +%Y%m%d).json
```

--------------------------------

### Push Commits to Remote Fork

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Push your local commits to your GitHub fork. The '-u' flag sets the upstream for future pushes.

```sh
git push -u origin branch/name-here
```

--------------------------------

### Ignore TLS Certificate Errors

Source: https://context7.com/epi052/feroxbuster/llms.txt

Use the --insecure flag to bypass TLS certificate validation, useful for self-signed certificates.

```bash
feroxbuster -u https://example.com \
  --insecure \
  -w wordlist.txt
```

--------------------------------

### Throttle Progress Bar Display

Source: https://context7.com/epi052/feroxbuster/llms.txt

Limit the number of concurrent directory progress bars shown in the terminal with the --limit-bars option.

```bash
# Show at most 3 directory bars simultaneously
feroxbuster -u https://example.com \
  --limit-bars 3 \
  -w wordlist.txt
```

--------------------------------

### Force Push Updated Main Branch

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Optionally, force push your updated local 'main' branch to your GitHub fork. Use with caution as it overwrites the remote branch.

```bash
$ git push origin main --force
```

--------------------------------

### Create a New Git Branch

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

Create a new branch off the main branch for your feature or fix. This isolates your changes.

```sh
git checkout -B branch/name-here
```

--------------------------------

### Scope-Checked Link Extraction

Source: https://context7.com/epi052/feroxbuster/llms.txt

Extracted links are scope-checked against --scope before being queued. Sub-paths are also added automatically.

```bash
feroxbuster -u https://example.com \
  --scope example.com api.example.com \
  -w wordlist.txt
```

--------------------------------

### Filter Similar Responses with SimHash

Source: https://context7.com/epi052/feroxbuster/llms.txt

Use --filter-similar to filter responses that are structurally similar to a known error page, based on SimHash and a Hamming distance threshold. This requires a manual request to identify the reference URL first.

```bash
feroxbuster -u https://example.com \
  --filter-similar https://example.com/this-page-does-not-exist-xyz123 \
  -w wordlist.txt
```

```bash
feroxbuster -u https://example.com \
  --filter-similar https://example.com/404page \
  --filter-similar https://example.com/error \
  -w wordlist.txt
```

```bash
feroxbuster -u https://example.com \
  --dont-filter \
  --filter-similar https://example.com/nonexistent \
  -w wordlist.txt
```

--------------------------------

### Time-Limited Scans with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Limit the total scan duration using the --time-limit option, which accepts suffixes like s, m, h, and d.

```bash
feroxbuster -u https://example.com \
  --time-limit 10m \
  -w wordlist.txt
```

--------------------------------

### Verbose Logging Levels in Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Control the verbosity of Feroxbuster logs using the -v flag: -v for warnings, -vv for info, and -vvv for debug level.

```bash
feroxbuster -u https://example.com \
  -vv \
  -w wordlist.txt
```

--------------------------------

### Cap Response Body Reads

Source: https://context7.com/epi052/feroxbuster/llms.txt

Prevent out-of-memory errors by limiting response body reads to a specified size in bytes using --response-size-limit.

```bash
# Limit response body reads to 1 MB
feroxbuster -u https://example.com \
  --response-size-limit 1048576 \
  -w wordlist.txt
```

--------------------------------

### Default Link Extraction

Source: https://context7.com/epi052/feroxbuster/llms.txt

Link extraction is enabled by default, parsing HTML for links in various tags and JavaScript. Ensure a wordlist is provided.

```bash
feroxbuster -u https://example.com -w wordlist.txt
```

--------------------------------

### Set Content-Type with URL-Encoded Payload

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Sends a URL-encoded payload in the request body and automatically sets the 'Content-Type' header to 'application/x-www-form-urlencoded'. Supports inline data or reading from a file.

```bash
./feroxbuster -u http://127.1 --data-urlencoded 'some=payload'
```

```bash
./feroxbuster -u http://127.1 --data-urlencoded @file.payload
```

--------------------------------

### Environment Variable for Debug Logging

Source: https://context7.com/epi052/feroxbuster/llms.txt

Set the RUST_LOG environment variable to control logging levels, providing an alternative to the -v flags for debug output.

```bash
RUST_LOG=debug feroxbuster -u https://example.com -w wordlist.txt
```

--------------------------------

### Disable Wildcard Auto-Detection

Source: https://context7.com/epi052/feroxbuster/llms.txt

Disable Feroxbuster's default automatic wildcard/404-pattern detection using --dont-filter. This is useful when explicitly using --filter-similar.

```bash
feroxbuster -u https://example.com \
  --dont-filter \
  --filter-similar https://example.com/nonexistent-page \
  -w wordlist.txt
```

--------------------------------

### Set Content-Type with JSON Payload

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Sends a JSON payload in the request body and automatically sets the 'Content-Type' header to 'application/json'. Supports inline JSON or reading from a file.

```bash
./feroxbuster -u http://127.1 --data-json '{"some": "payload"}'
```

```bash
./feroxbuster -u http://127.1 --data-json @payload.json
```

--------------------------------

### Self-Update Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Update Feroxbuster to the latest release from GitHub using the --update flag. Shows status messages for up-to-date or updated versions.

```bash
feroxbuster --update

# Output examples:
# Feroxbuster 2.13.1 is up to date
# Feroxbuster updated to 2.14.0 version
```

--------------------------------

### Append Trailing Slash

Source: https://context7.com/epi052/feroxbuster/llms.txt

Automatically append a trailing slash to every request URL using the --add-slash flag.

```bash
feroxbuster -u https://example.com \
  --add-slash \
  -w wordlist.txt
```

--------------------------------

### Disable Link Extraction

Source: https://context7.com/epi052/feroxbuster/llms.txt

Disable Feroxbuster's default link extraction behavior using --dont-extract-links for pure wordlist brute-forcing.

```bash
feroxbuster -u https://example.com \
  --dont-extract-links \
  -w wordlist.txt
```

--------------------------------

### Exclude URLs from Scanning with Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Prevent specific URLs or URL patterns (using regex) from being scanned by using the --dont-scan option.

```bash
feroxbuster -u https://example.com \
  --dont-scan https://example.com/logout \
  --dont-scan "/admin/delete.*" \
  -w wordlist.txt
```

--------------------------------

### Quiet Mode in Feroxbuster

Source: https://context7.com/epi052/feroxbuster/llms.txt

Suppress the banner and header output, showing only scan results by using the --quiet flag.

```bash
feroxbuster -u https://example.com \
  --quiet \
  -w wordlist.txt
```

--------------------------------

### Amend Last Commit

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

If changes are needed after an initial commit, amend the last commit instead of creating a new one.

```sh
git commit --amend
```

--------------------------------

### Update Feroxbuster

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Command to update feroxbuster to the latest version (available from v2.9.1 onwards).

```bash
./feroxbuster --update
```

--------------------------------

### Proxy Traffic Through SOCKS5h Proxy

Source: https://github.com/epi052/feroxbuster/blob/main/README.md

Routes traffic through a SOCKS5h proxy, including DNS lookups, for enhanced anonymity or network traversal.

```bash
./feroxbuster -u http://127.1 --proxy socks5h://127.0.0.1:9050
```

--------------------------------

### Filter Responses by Regex

Source: https://context7.com/epi052/feroxbuster/llms.txt

Use --filter-regex to exclude responses whose body content matches a specified regular expression. Multiple regex filters can be applied.

```bash
feroxbuster -u https://example.com \
  --filter-regex "^(Page Not Found|404 Error)$" \
  --filter-regex "Access Denied" \
  -w wordlist.txt
```

--------------------------------

### Force Push After Amending Commit

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

After amending a commit, force push to overwrite the old commit on your remote fork. Use with caution.

```sh
git push --force
```

--------------------------------

### Delete Local Git Branch

Source: https://github.com/epi052/feroxbuster/blob/main/CONTRIBUTING.md

After your pull request is merged, delete the local branch to keep your repository clean.

```sh
git branch -D branch/to-delete-name
```

=== COMPLETE CONTENT === This response contains all available snippets from this library. No additional content exists. Do not make further requests.