A fast web fuzzer written in Go.
Publisher’s description
What is ffuf?
ffuf by ffuf is open-source Windows software. It is written in Go.
Installation and requirements
The publisher provides Portable installers for 64-bit, ARM64 and 32-bit Windows. It runs without installation (portable).
Updates and version history
The current version is 2.3.0, released on September 9, 2026. The version history goes back to February 6, 2023: 5 releases, all linked to the official files. That is about 1.4 releases a year.
Popularity and file types
The source code on GitHub (ffuf/ffuf) has 16,927 stars.
Project description on GitHub: “Fast web fuzzer written in Go”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Native ARM64 build for Windows on Arm
- Portable: runs without installation
- Updated in the last two months
- Large user base
In short: ffuf is an open-source Windows tool for 64-bit, ARM64 and 32-bit PCs.
Is ffuf safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
091C8A22D0C7FBE07D343B3AE2C213DBD37B38A8A2ED40631FCD3128EA1764FB· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the ffuf/ffuf repository on GitHub by the Open Source Security Foundation, last run on October 19, 2026.
- No dangerous workflows10
- Security policy10
- Actively maintained10
- No binaries in the repository10
- Licence declared10
- Published packages10
- Static code analysis9
- Signed releases8
- Code review1
- Restricted token permissions0
- Pinned dependencies0
- OpenSSF Best Practices badge0
- Fuzzing0
- Branch protection0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 5 versions ›5 versions over 4 years · about 1.4 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 2.3.0Latest | September 9, 2026 | — | 32-bit ZIPARM64 ZIP64-bit ZIP |
| 2.2.1 | July 13, 2026 | — | ARM64 ZIP64-bit ZIP32-bit ZIP |
| 2.2.0 | July 11, 2026 | — | ARM64 ZIP64-bit ZIP32-bit ZIP |
| 2.1.0 | September 16, 2023 | — | 64-bit ZIPARM64 ZIPARM ZIP32-bit ZIP |
| 2.0.0 | February 6, 2023 | — | ARM ZIP32-bit ZIPARM64 ZIP64-bit ZIP |
Install from the command line
Silent install ›winget install --id ffuf.ffuf -escoop install main/ffufRelated guide: How to use winget: install and update apps
Also for other systems
brew install ffufInformation
- Publisher
- ffuf
- Licence
- MIT
- Price
- Free
- Source code
- github.com/ffuf/ffuf
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64, 32-bit
- Installer
- Portable
- Version
- 2.3.0
- Released
- September 9, 2026
- Added to the catalogue
- June 27, 2024
- Versions listed
- 5
- Updates / year
- 1.4
- GitHub stars
- 16,927
- GitHub forks
- 1,622
- Website
- github.com
- winget ID
- ffuf.ffuf
- Scoop package
- main/ffuf
Ratings and reviews
No reviews yet. Be the first to rate it.
Frequently asked questions
Is ffuf free?
Yes. ffuf is open-source software under the MIT licence.
Is ffuf safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install ffuf with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does ffuf run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
Where can I download an older version of ffuf?
The versions page lists all 5 versions with links to their official installer files, back to February 6, 2023.
Can I use ffuf without administrator rights?
Yes, it is portable: unpack and run it.