Wfuzz Directory Scanner Detected

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects the use of Wfuzz, a web fuzzer, by identifying the 'Wfuzz' string in the HTTP User-Agent header. This activity is typically associated with reconnaissance, as attackers use such tools to discover directories, files, and other web application structures.