fuzz

There are 11 repositories under fuzz topic.

• 1N3 / IntruderPayloads

  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

  attackbugbountyburpsuiteburpsuite-engagementburpsuite-intruderfuzzfuzz-listsfuzzinginjectionintruderpayloadssql-injection
  Language:BlitzBasic 3866

• Bo0oM / fuzz.txt

  Potentially dangerous files

  listwebvulnerabilityfilesfuzzdirbuster
  3237

• gh0stkey / Web-Fuzzing-Box

  Web Fuzzing Box - Web 模糊测试字典与一些Payloads

  bugbountyfuzzfuzzinghackingpenetration-testingpentesting
  Language:HTML 2396

• tom0li / collection-document

  Collection of quality safety articles. Awesome articles.

  awesomebounty-huntersbug-bountyclouddnsfuzzgithubhackerhackingjavalistpentestredteamresearchsecsecuritysrcwafwebxss
  2083

• evilc0deooo / PentesterSpecialDict

  构建优化高效的渗透 fuzz 字典合集

  blastboomburpdictionaryfuzzfuzzing
  Language:PHP 1854
• GraphQLmap

  swisskyrepo / GraphQLmap

  GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

  capture-the-flagctffuzzgraphqlgraphql-injectionhacktoberfestnosql-injectionpentestsql-injection
  Language:Python 1567

• c0ny1 / upload-fuzz-dic-builder

  上传漏洞fuzz字典生成脚本

  fuzzupload-vul
  Language:Python 1267

• vaycore / OneScan

  OneScan 是一款用于递归目录扫描的 BurpSuite 插件

  burpburp-extensionsburp-pluginburpsuiteburpsuite-extenderdir-fuzzdir-scannerdir-searchdirscanfuzz
  Language:Java 1204
• AboutSecurity

  ffffffff0x / AboutSecurity

  Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

  bountybypasscheatsheetctfdictionaryffffffff0xfuzzhackinginfosecinfrastructuremethodologypayloadpenetration-testingpentestpentestingredteamsecurity
  Language:HTML 1058

• 0xPugal / fuzz4bounty

  1337 Wordlists for Bug Bounty Hunting

  bruteforcebugbountydirsearchffuffuzzfuzz4bountywordlist
  905

• 7dog7 / bottleneckOsmosis

  瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

  scanscannerdictctffuzz
  Language:Python 713
• reaper

  ghostsecurity / reaper

  💀 Don't fear the Reaper 👻

  automationbug-bountyhackingproxysecurityagenticaiappsecowaspfuzzfuzzing
  Language:Go 688

• rust-fuzz / honggfuzz-rs

  Fuzz your Rust code with Google-developed Honggfuzz !

  fuzzfuzzerhonggfuzzrustfuzzingfuzz-testingsecuritysecurity-toolssecurity-testingcratesrust-fuzzsanitizer
  Language:Rust 492

• RedTeamPentesting / monsoon

  Fast HTTP enumerator

  httpfuzzfuzzerenumeratorfastgosecurity
  Language:Go 489

• KissPeter / APIFuzzer

  Fuzz test your application using your OpenAPI or Swagger API definition without coding

  api-blueprintswaggerpython3fuzzopenapifuzzer
  Language:Python 459

• Brum3ns / firefly

  Black box fuzzer for web applications

  bugbountyfuzzfuzzingpenetration-testingpentestingsecurity-toolsfuzzerblack-box-testingblackboxweb-security
  Language:Go 434

• koutto / ioctlbf

  Windows Kernel Drivers fuzzer

  ioctldriverfuzzwindowskernelring0
  Language:C 370

• Ackee-Blockchain / trident

  Rust-based framework to Fuzz Solana programs, designed to help you ship secure code.

  anchorfuzzfuzz-testingfuzzerfuzzingrustsolana
  Language:Rust 339

• ameenmaali / qsfuzz

  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

  fuzzbugbountyinfosecsecurityvulnerability-detection
  Language:Go 299

• microsoft / rest-api-fuzz-testing

  REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows

  apidevopsrestrest-apifuzzingfuzzfuzzing-framework
  Language:F# 264

• camshaft / bolero

  property testing and verification front-end for Rust

  fuzzfuzz-testingproperty-testinglibfuzzerhonggfuzzafl
  Language:C 219

• payloadbox / directory-payload-list

  🎯 Directory Payload List

  payloadboxdirectorydirectory-payloaddirectory-listpayload-listpayloadpayloadsfuzzingfuzzfuzz-testingbugbountybug-bountywebsecuritywebsecwebsecurity-referenceweb-securityweb-security-researchweb-secureawesomeawesome-list
  181

• tamimhasan404 / Wordlist404

  Small but effective wordlist for brute-forcing and discovering hidden things.

  usefulwordlistfuzzscriptsdir-bruteforcexssrecon
  156

• KajanM / DirBuster

  DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers.

  owaspweb-securityforced-browsebruteforcefuzz
  Language:Java 151

• hackingyseguridad / diccionarios

  Diccionarios de: usuarios, passwords, XSS, ficheros, carpetas, dorks, etc .. ( hackingyseguridad.com )

  passwordsdiccionariousuarioscredencialesxssdorksfuerzabrutapasswddiccionariosarchivoscarpetasdirectoriosficherosfuzzfuzzingspanish-language
  145

• LyleMi / Browser-Fuzz-Summarize

  Browser Fuzz Summarize / 浏览器模糊测试综述

  fuzzbrowser
  Language:Python 142
• test-each

  ehmicky / test-each

  🤖 Repeat tests. Repeat tests. Repeat tests.

  testingtesttest-automationdata-drivendata-driven-testsdata-driven-testingfuzzingfuzz-testingfuzzcartesiansnapshot-testingcode-qualityes6javascriptnodejslibraryiterableforeachfunctional-programmingtypescript
  Language:JavaScript 116
• hfuzz

  thehlopster / hfuzz

  Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templates, web-scanners, seclist, bo0m, and more.

  fuzzfuzzingweb-fuzzingwordlisthackingsecuritybugbountypentesting
  102

• Magnushhoie / fuz

  Fuz is a blazingly fast text, file and folder search tool

  bash-scriptfzffzf-scriptsripgrepvimnotes-toolbashobsidianobsidian-notescodesnippetcodesnippetsobsidian-pluginroamresearchbatbatcatzshfuzz
  Language:Shell 96

• monkeym4ster / DomainFuzz

  Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

  fuzzdomainphishingtyposquattingdomainsdns
  Language:JavaScript 93

• ad1992 / fuzzify

  A tiny lightweight library for Fuzzy Search

  fuzzfuzzyfuzzy-logicfuzzy-searchsearchlightweighttypescripthacktoberfest
  Language:TypeScript 91

• JavierOlmedo / UltimateCMSWordlists

  📚 An ultimate collection wordlists of the best-known CMS

  cmscms-frameworkfuzzingfuzzsecurityweb-securityweb-security-researchhackingwordlistwordpressjoomladrupaldictionary
  91

• hexian2001 / HRP-Nnepnep-auto-pwn

  基于pwntools+angr的简单CTF AMD64 PWN AUTO FUZZ

  autopwnfuzzpwnctfangr
  Language:Python 53

• smasterfree / api-fuzz

  python restful api fuzz test

  pythonfuzzrest-apirestfultesting
  Language:Python 51
• h4ck

  fagci / h4ck

  Hacking tools. IP fortune, webmap -- web vulns scanner, rtsp brute+fuzz, and more.

  h4ckfuzzbrute-forcehacking-toolsrtspweb-hackingwebmapfortune-rtsp
  Language:Python 44
• promocode-wordlist

  thehlopster / promocode-wordlist

  Promocode wordlist

  hackingpentestingwordlistfuzzfuzzingsecurityweb-fuzzing
  40