ffuf / ffuf/ffuf

Output file: Incorrect keyword‑to‑value mapping in CSV/HTML output

Open
#851 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
16.7k
Forks
1.6k
Avg merge
9m
Merged PRs (30d)
4

Description

**Severity:** medium to high

### Briefing
When using ffuf, multiple wordlists can be used and the output can be saved in various formats. When multiple keywords are used, the allocation from the keyword to the value is incorrect for **csv and html** reports. For csv, some values from one wordlist appear in the column for another wordlist, while for html two whole columns are swapped.

### Expected Result:
When using multiple wordlists, all values are allocated to their respective wordlists in the report.

### Actual Result:
For csv, some values from one wordlist appear in the column for another wordlist, while for html two whole columns are swapped.

### Steps to reproduce:

Precondition: a fuzzable test target is available
1. Execute ffuf against the test target using multiple wordlists and choose the csv/html output
I.e.: `ffuf -u http://10.10.10.5/DIR/SUB/FILE -w testdata/dirs.txt:DIR -w testdata/subs.txt:SUB -w testdata/files.txt:FILE -mc 404 -of html -o reports/report.html -s`
2. Open the report and observe the columns for the keywords
--> The values are not allocated to their respective wordlist.

### Testdata
**dirs.txt:**
dir1
dir2
dir3

**subs.txt:**
subdir1
subdir2
subdir3

**files.txt:**
file1
file2
file3

### Environment
**Device:** Virtual Box VM
**OS:** Kali Linux 2025.2
**Version:** v2.1.0-dev

### Attachments
**csv:**

![Image](https://github.com/user-attachments/assets/f81625b7-8d68-4837-99e2-429b6ade38ce)
[report.csv](https://github.com/user-attachments/files/20802526/report.csv)

**html:**

![Image](https://github.com/user-attachments/assets/285db806-dbd1-44e5-91e2-b6973f35588a)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.