Fuzz with specified HTTP method and [d]ata, while [f]iltering out comma separated status [c]odes
ffuf -w path/to/postdata.txt -X POST -d "username=admin\&password=FUZZ" -u http://target/login.php -fc 401,403