ffuf: a filtered word is not a status

A printed line has the status

When ffuf prints a word, the line includes the status it received for the path it requested. That status belongs to that printed line. You can cite it. A word that was never printed has no status in the file you saved.

The word is the path that was requested, not a file you opened on disk. This note is about the lines that were kept.

A filter removes lines before you see them

A size filter, a word filter, or a status filter drops responses that match the rule. Those words are absent because they were filtered, or because they were never requested, depending on the job. They are not automatically “not found.”

If the job note does not say whether a filter was used, write “filter not recorded.” Do not choose 404 to fill the gap.

What to file

File the base URL, the filter settings from the job, and each printed word with its status. For a word you care about that is missing, file “no status printed” and the filter. Do not file a code the output does not contain.

Worked case: backup treated as 404

The lab job used a size filter and the saved output has no line for the word backup. A draft says https://staging.lab.example/backup returned 404. The output never printed that path.

The note says the size filter was on and backup has no status in this file. 404 is not written. If the path matters, it needs a request whose status was saved, which this filtered run is not.

base: https://staging.lab.example/
filter: size filter on
word backup: not in the output
status for backup: none printed
write: no status for that word
not: 404