fuzz

There are 10 repositories under fuzz topic.

• 1N3 / IntruderPayloads

  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

  attackbugbountyburpsuiteburpsuite-engagementburpsuite-intruderfuzzfuzz-listsfuzzinginjectionintruderpayloadssql-injection
  Language:BlitzBasic 3686

• Bo0oM / fuzz.txt

  Potentially dangerous files

  dirbusterfilesfuzzlistvulnerabilityweb
  2889

• gh0stkey / Web-Fuzzing-Box

  Web Fuzzing Box - Web 模糊测试字典与一些Payloads

  bugbountyfuzzfuzzinghackingpenetration-testingpentesting
  Language:HTML 2168

• tom0li / collection-document

  Collection of quality safety articles. Awesome articles.

  dnspentestlistsecuritysechackingsrcbug-bountyfuzzxssresearchgithubwafjavahackerredteambounty-hunterswebcloudawesome
  2021

• evilc0deooo / PentesterSpecialDict

  构建并优化高效的渗透 Fuzz 字典，提升网络安全从业人员的渗透测试效率。

  blastboomburpdictionaryfuzzfuzzing
  Language:PHP 1616
• GraphQLmap

  swisskyrepo / GraphQLmap

  GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

  capture-the-flagctffuzzgraphqlgraphql-injectionhacktoberfestnosql-injectionpentestsql-injection
  Language:Python 1394

• c0ny1 / upload-fuzz-dic-builder

  上传漏洞fuzz字典生成脚本

  fuzzupload-vul
  Language:Python 1230
• AboutSecurity

  ffffffff0x / AboutSecurity

  Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

  bountybypasscheatsheetctfdictionaryffffffff0xfuzzhackinginfosecinfrastructuremethodologypayloadpenetration-testingpentestpentestingredteamsecurity
  Language:HTML 982

• 0xPugal / fuzz4bounty

  1337 Wordlists for Bug Bounty Hunting

  bruteforcebugbountydirsearchffuffuzzfuzz4bountywordlist
  790

• vaycore / OneScan

  OneScan是递归目录扫描的BurpSuite插件

  burpburp-extensionsburp-plugindir-fuzzdir-scannerdirscanfuzzfuzz-testing
  Language:Java 709

• 7dog7 / bottleneckOsmosis

  瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

  ctfdictfuzzscanscanner
  Language:Python 701

• RedTeamPentesting / monsoon

  Fast HTTP enumerator

  httpfuzzfuzzerenumeratorfastgosecurity
  Language:Go 460

• rust-fuzz / honggfuzz-rs

  Fuzz your Rust code with Google-developed Honggfuzz !

  fuzzfuzzerhonggfuzzrustfuzzingfuzz-testingsecuritysecurity-toolssecurity-testingcratesrust-fuzzsanitizer
  Language:Rust 460

• KissPeter / APIFuzzer

  Fuzz test your application using your OpenAPI or Swagger API definition without coding

  api-blueprintfuzzfuzzeropenapipython3swagger
  Language:Python 431

• Brum3ns / firefly

  Black box fuzzer for web applications

  black-box-testingblackboxbugbountyfuzzfuzzerfuzzingpenetration-testingpentestingsecurity-toolsweb-security
  Language:Go 405

• ameenmaali / qsfuzz

  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

  bugbountyfuzzinfosecsecurityvulnerability-detection
  Language:Go 296

• koutto / ioctlbf

  Windows Kernel Drivers fuzzer

  driverfuzzioctlkernelring0windows
  Language:C 296

• microsoft / rest-api-fuzz-testing

  REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows

  apidevopsfuzzfuzzingfuzzing-frameworkrestrest-api
  Language:F# 262

• Ackee-Blockchain / trident

  Rust-based framework to Fuzz Solana programs, designed to help you ship secure code.

  anchorfuzzfuzz-testingfuzzerfuzzingrustsolana
  Language:Rust 215

• camshaft / bolero

  property testing and verification front-end for Rust

  aflfuzzfuzz-testinghonggfuzzlibfuzzerproperty-testing
  Language:C 192

• payloadbox / directory-payload-list

  🎯 Directory Payload List

  awesomeawesome-listbug-bountybugbountydirectorydirectory-listdirectory-payloadfuzzfuzz-testingfuzzingpayloadpayload-listpayloadboxpayloadsweb-secureweb-securityweb-security-researchwebsecwebsecuritywebsecurity-reference
  151

• tamimhasan404 / Wordlist404

  Small but effective wordlist for brute-forcing and discovering hidden things.

  dir-bruteforcefuzzreconscriptsusefulwordlistxss
  149

• LyleMi / Browser-Fuzz-Summarize

  Browser Fuzz Summarize / 浏览器模糊测试综述

  fuzzbrowser
  Language:Python 136

• KajanM / DirBuster

  DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers.

  bruteforceforced-browsefuzzowaspweb-security
  Language:Java 127
• test-each

  ehmicky / test-each

  🤖 Repeat tests. Repeat tests. Repeat tests.

  testingtesttest-automationdata-drivendata-driven-testsdata-driven-testingfuzzingfuzz-testingfuzzcartesiansnapshot-testingcode-qualityes6javascriptnodejslibraryiterableforeachfunctional-programmingtypescript
  Language:JavaScript 111
• hfuzz

  thehlopster / hfuzz

  Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templates, web-scanners, seclist, bo0m, and more.

  bugbountyfuzzfuzzinghackingpentestingsecurityweb-fuzzingwordlist
  91

• monkeym4ster / DomainFuzz

  Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

  dnsdomaindomainsfuzzphishingtyposquatting
  Language:JavaScript 88

• ad1992 / fuzzify

  A tiny lightweight library for Fuzzy Search

  fuzzfuzzyfuzzy-logicfuzzy-searchhacktoberfestlightweightsearchtypescript
  Language:TypeScript 87

• JavierOlmedo / UltimateCMSWordlists

  📚 An ultimate collection wordlists of the best-known CMS

  cmscms-frameworkfuzzingfuzzsecurityweb-securityweb-security-researchhackingwordlistwordpressjoomladrupaldictionary
  84

• Magnushhoie / fuz

  Fuz is a blazingly fast text, file and folder search tool

  bash-scriptfzffzf-scriptsripgrepvimnotes-toolbashobsidianobsidian-notescodesnippetcodesnippetsobsidian-pluginroamresearchbatbatcatzshfuzz
  Language:Shell 78

• hexian2001 / HRP-Nnepnep-auto-pwn

  基于pwntools+angr的简单CTF AMD64 PWN AUTO FUZZ

  autopwnfuzzpwnctfangr
  Language:Python 48

• smasterfree / api-fuzz

  python restful api fuzz test

  fuzzpythonrest-apirestfultesting
  Language:Python 48
• h4ck

  fagci / h4ck

  Hacking tools. IP fortune, webmap -- web vulns scanner, rtsp brute+fuzz, and more.

  h4ckfuzzbrute-forcehacking-toolsrtspweb-hackingwebmapfortune-rtsp
  Language:Python 38
• SuperTruder

  ElSicarius / SuperTruder

  A python3 intruder that gave me bounties, easy to use and as fast as fuff

  bugbountybugbounty-toolfuzzfuzzerinfosecintruder
  Language:Python 37
• xnuimagefuzzer

  xsscx / xnuimagefuzzer

  XNU Image Fuzzer - iOS App for Fuzzing Images with Objective-C Code covering 12 CGCreateBitmap & CGColorSpace Functions working with Raw Data and String Injection.

  crashexploitfilefuzzfuzzinggraphicsimageresearchsecurityuttxnuimagefuzzerdebugginginterposingiosmacosobjective-cxcodeiosonmac
  Language:Objective-C 35

• zodf0055980 / Yuan-fuzz

  Fuzzing with the generated argument

  fuzzargv-informationaflafl-fuzzfuzzerk-meansk-means-clustering
  Language:C 34