wfuzz
Web application bruteforcer
web-scanningRed Team
Toolweb-scanningredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
Wfuzz is a tool designed for bruteforcing Web Applications, it can be used for finding resources not linked directories, servlets, scripts, etc, bruteforce GET and POST parameters for checking different kind of injections (SQL, XSS, LDAP,etc), bruteforce Forms parameters (User/Password), Fuzzing, etc.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on Kali Linux with `sudo apt install wfuzz`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.
