FFUF.me

Content Discovery - Rate Limited

Sometimes services are rate limited, this means you're only allowed to send a certain amount of requests per second. In this instance the directory we are going to fuzz is limited to 50 requests per second. Try running the below command and you'll soon notice you're receiving a lot of 429 HTTP Statuses which means you're temporarily banned from making requests for a few seconds.

We're using the -mc switch to only display http statuses 200 and 429.

Now try running the below command, the -p switch causes the application to pause 0.1 seconds per request and the -t switch creates 5 versions of ffuf which means a maximum of 50 requests per second.

Now you shouldn't get any more 429 errors and you should find the oracle file.