Cracken + ffuf
Cracken places ffuf's FUZZ keyword in the request to brute-force hidden directories, parameters, and virtual hosts, auto-calibrating away the soft-404 noise. It attacks the endpoints it forces open.
Connecting ffuf
- Connect with
No credentials — runs on your own Tentacle
- Cadence
Runs on demand — installed on a Tentacle, then invoked during an operation (the agent can install and uninstall it mid-run)
- Requires
A Tentacle running Linux or macOS. Free licence, nothing to purchase and no credentials to supply.
What Cracken gets from ffuf
The FUZZ keyword value that produced the hit — the wordlist entry — and the full URL
HTTP status code
Response size in bytes
Response body word count and line count
Time to first response byte, in milliseconds
Redirect location (verbose mode)
Regex matches inside the response body
Newline-delimited JSON records on stdout, or json, ejson, html, md, csv and ecsv output files
What ffuf does not do
ffuf reports only the responses that survive its matchers and filters — status code, size, words, lines, time-to-first-byte and regex — and does not confirm a forced-open path is a vulnerability or exploit it. It also finds nothing on its own: every run needs a wordlist, and Cracken installs only the binary, so it fuzzes against the lists the Tentacle's Kali baseline already carries.
How Cracken uses ffuf
- 01
Point Cracken at a web target
- 02
Cracken runs ffuf
- 03
Attack what it forced open
- 04
Confirm the Tentacle is ready
Frequently asked questions
Do I need to install ffuf?
No; Cracken installs ffuf on a Tentacle, a Kali container running on your own infrastructure, and drives it during an operation.
What does Cracken do with the endpoints ffuf finds?
Cracken turns each hidden directory, parameter, or virtual host that ffuf forces open into a live target and attacks it in the same operation.
“I've been pretty impressed with how CrackenAGI is able to do its vulnerability discovery, enumeration, reconnaissance, as well as eventually being able to actually execute different exploitation paths.”
Attack with real ffuf context.
See how Cracken runs ffuf on a Tentacle you host, and proves what it finds end to end.