gf (grep-friendly)
Pattern wrapper to find interesting URLs.
KaliParrotpassive
pkg: gf
gf applies curated grep patterns (xss, sqli, ssrf, redirect…) to URL lists to surface likely-vulnerable endpoints.
Syntax
{urls} | gf {pattern}
Example
cat urls.txt | gf xss
Filters URLs that look prone to XSS for focused testing.
Advantages
- Fast triage of huge URL lists
- Custom pattern packs
Disadvantages
- Pattern-only (no testing)
- Needs good input
Tags
#web#recon#grep
Official docs: gf ↗
Related commands
Frequently asked questions
What is gf (grep-friendly) used for?
gf applies curated grep patterns (xss, sqli, ssrf, redirect…) to URL lists to surface likely-vulnerable endpoints.
What is an example gf (grep-friendly) command?
A common example is: cat urls.txt | gf xss — Filters URLs that look prone to XSS for focused testing.
Is gf (grep-friendly) part of Kali Linux?
Yes. gf (grep-friendly) ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install gf.
What category of security tool is gf (grep-friendly)?
gf (grep-friendly) is a Web Application tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.