# Wfuzz

Wfuzz is a Penetration Testing product. It runs on-premises. Pricing is free.

Wfuzz is a tool designed for bruteforcing Web Applications with multiple features like multiple injection points, recursion, and payload combinations.

## What is Wfuzz?

Wfuzz is a tool designed for bruteforcing Web Applications, it can be used for finding resources not linked (directories, servlets, scripts, etc), bruteforce GET and POST parameters for checking different kind of injections (SQL, XSS, LDAP,etc), bruteforce Forms parameters (User/Password), Fuzzing,etc.
Some features:
- Multiple Injection points capability with multiple dictionaries
- Recursion (When doing directory bruteforce)
- Post, headers and authentication data brute forcing
- Output to HTML
- Colored output
- Hide results by return code, word numbers, line numbers, regex
- Cookies fuzzing
- Multi threading
- Proxy support
- SOCK support
- Time delays between requests
- Authentication support (NTLM, Basic)
- All parameters bruteforcing (POST and GET)
- Multiple encoders per payload
- Payload combinations with iterators
- Baseline request (to filter results against)
- Brute force HTTP methods
- Multiple proxy support (each request through a different proxy)
- HEAD scan (faster for resource discovery)
- Dictionaries tailored for known applications (Weblogic, Iplanet, Tomcat, Domino, Oracle 9i, Vignette, Coldfusion and many more.i (Many dictionaries are from Darkraver's Dirb, www.open-labs.org)
Payloads:
- File
- List
- hexrand
- range
- names
- hexrange

Tags: Injection, Brute Force

## Quick facts

- Category: [Offensive Security](https://cybersectools.com/categories/offensive-security-testing) · [Penetration Testing](https://cybersectools.com/categories/pentesting-tools)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- Website: edge-security.com

## Wfuzz FAQ

### What is Wfuzz?

Wfuzz is a product in the Penetration Testing category. It covers Injection and Brute Force.

### What is the pricing for Wfuzz?

Wfuzz is free. Download and setup instructions are at https://www.edge-security.com/wfuzz.php.

### What are alternatives to Wfuzz?

Alternatives to Wfuzz listed on CybersecTools:

1. [Mgm Security Partners Infrastructure Penetration Testing](https://cybersectools.com/tools/mgm-security-partners-infrastructure-penetration-testing) - Infrastructure penetration testing service covering external, internal, identity (Commercial)
2. [Managed Autonomous Pentesting (MAP)](https://cybersectools.com/tools/hackurity-art-stack) - Managed continuous autonomous pentesting using payload-less exploitation and attack paths (Commercial)
3. [XBOW Captcha Bypass Tool](https://cybersectools.com/tools/xbow-captcha-bypass-tool) - AI-powered automated penetration testing platform for vulnerability discovery (Commercial)
4. [Burp Suite Professional](https://cybersectools.com/tools/burp-suite-professional) - A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing. (Commercial)
5. [FireCompass AI-powered Pen Testing](https://cybersectools.com/tools/firecompass-ai-powered-pen-testing) - AI-powered automated pen testing & continuous red teaming platform (Commercial)

Compare all Wfuzz alternatives at [https://cybersectools.com/alternatives/wfuzz](https://cybersectools.com/alternatives/wfuzz)

### What deployment and organization size does Wfuzz fit?

Wfuzz is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Wfuzz with similar solutions

- [Wfuzz vs Mgm Security Partners Infrastructure Penetration Testing](https://cybersectools.com/compare/mgm-security-partners-infrastructure-penetration-testing-vs-wfuzz)
- [Wfuzz vs Managed Autonomous Pentesting (MAP)](https://cybersectools.com/compare/hackurity-art-stack-vs-wfuzz)
- [Wfuzz vs XBOW Captcha Bypass Tool](https://cybersectools.com/compare/wfuzz-vs-xbow-captcha-bypass-tool)

All alternatives to Wfuzz: [/alternatives/wfuzz](https://cybersectools.com/alternatives/wfuzz)

---

Source: https://cybersectools.com/tools/wfuzz

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Wfuzz: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md