fuzz

There are 10 repositories under fuzz topic.

• 1N3 / IntruderPayloads

  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

  burpsuiteintruderpayloadsfuzz-listsfuzzingfuzzinjectionburpsuite-engagementburpsuite-intruderattacksql-injectionbugbounty
  Language:BlitzBasic 3553

• Bo0oM / fuzz.txt

  Potentially dangerous files

  listwebvulnerabilityfilesfuzzdirbuster
  2794

• tom0li / collection-document

  Collection of quality safety articles. Awesome articles.

  dnspentestlistsecuritysechackingsrcbug-bountyfuzzxssresearchgithubwafjavahackerredteambounty-hunterswebcloudawesome
  1979

• gh0stkey / Web-Fuzzing-Box

  Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...

  bugbountypentestinghackingfuzzfuzzingpenetration-testing
  Language:HTML 1932

• a3vilc0de / PentesterSpecialDict

  Dictionary sets often used in penetration testing work

  dictionaryfuzzingfuzzburpblastboom
  Language:PHP 1414
• GraphQLmap

  swisskyrepo / GraphQLmap

  GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

  graphqlsql-injectionnosql-injectiongraphql-injectionfuzzpentestctfcapture-the-flaghacktoberfest
  Language:Python 1301

• c0ny1 / upload-fuzz-dic-builder

  上传漏洞fuzz字典生成脚本

  fuzzupload-vul
  Language:Python 1176
• AboutSecurity

  ffffffff0x / AboutSecurity

  Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

  payloadsecuritydictionaryfuzzpentesthackingredteambountycheatsheetbypassmethodologyinfrastructureffffffff0xpenetration-testinginfosecpentestingctf
  Language:HTML 931

• 7dog7 / bottleneckOsmosis

  瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

  ctfdictfuzzscanscanner
  Language:Python 685

• 0xPugal / fuzz4bounty

  1337 Wordlists for Bug Bounty Hunting

  bugbountydirsearchffuffuzzwordlistbruteforcefuzz4bounty
  678

• vaycore / OneScan

  OneScan是递归目录扫描的BurpSuite插件

  burpburp-extensionsburp-plugindirscanfuzzfuzz-testing
  Language:Java 558

• RedTeamPentesting / monsoon

  Fast HTTP enumerator

  enumeratorfastfuzzfuzzergohttpsecurity
  Language:Go 444

• rust-fuzz / honggfuzz-rs

  Fuzz your Rust code with Google-developed Honggfuzz !

  cratesfuzzfuzz-testingfuzzerfuzzinghonggfuzzrustrust-fuzzsanitizersecuritysecurity-testingsecurity-tools
  Language:Rust 441

• KissPeter / APIFuzzer

  Fuzz test your application using your OpenAPI or Swagger API definition without coding

  api-blueprintswaggerpython3fuzzopenapifuzzer
  Language:Python 398

• Brum3ns / firefly

  Black box fuzzer for web applications

  bugbountyfuzzfuzzingpenetration-testingpentestingsecurity-toolsfuzzerblack-box-testingblackboxweb-security
  Language:Go 374

• ameenmaali / qsfuzz

  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

  bugbountyfuzzinfosecsecurityvulnerability-detection
  Language:Go 291

• koutto / ioctlbf

  Windows Kernel Drivers fuzzer

  ioctldriverfuzzwindowskernelring0
  Language:C 286

• microsoft / rest-api-fuzz-testing

  REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows

  apidevopsfuzzfuzzingfuzzing-frameworkrestrest-api
  Language:F# 261

• camshaft / bolero

  property testing and verification front-end for Rust

  aflfuzzfuzz-testinghonggfuzzlibfuzzerproperty-testing
  Language:C 167

• LyleMi / Browser-Fuzz-Summarize

  Browser Fuzz Summarize / 浏览器模糊测试综述

  browserfuzz
  Language:Python 140

• payloadbox / directory-payload-list

  🎯 Directory Payload List

  payloadboxdirectorydirectory-payloaddirectory-listpayload-listpayloadpayloadsfuzzingfuzzfuzz-testingbugbountybug-bountywebsecuritywebsecwebsecurity-referenceweb-securityweb-security-researchweb-secureawesomeawesome-list
  135

• tamimhasan404 / Wordlist404

  Small but effective wordlist for brute-forcing and discovering hidden things.

  dir-bruteforcefuzzreconscriptsusefulwordlistxss
  135

• Ackee-Blockchain / trident

  Fuzz testing framework for Solana programs written in Anchor

  anchorfuzzfuzz-testingfuzzerfuzzingrustsolana
  Language:Rust 124

• KajanM / DirBuster

  DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers.

  bruteforceforced-browsefuzzowaspweb-security
  Language:Java 112
• test-each

  ehmicky / test-each

  🤖 Repeat tests. Repeat tests. Repeat tests.

  testingtesttest-automationdata-drivendata-driven-testsdata-driven-testingfuzzingfuzz-testingfuzzcartesiansnapshot-testingcode-qualityes6javascriptnodejslibraryiterableforeachfunctional-programmingtypescript
  Language:JavaScript 110

• monkeym4ster / DomainFuzz

  Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

  fuzzdomainphishingtyposquattingdomainsdns
  Language:JavaScript 88
• hfuzz

  thehlopster / hfuzz

  Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templates, web-scanners, seclist, bo0m, and more.

  fuzzfuzzingweb-fuzzingwordlisthackingsecuritybugbountypentesting
  86

• JavierOlmedo / UltimateCMSWordlists

  📚 An ultimate collection wordlists of the best-known CMS

  cmscms-frameworkdictionarydrupalfuzzfuzzinghackingjoomlasecurityweb-securityweb-security-researchwordlistwordpress
  76

• Magnushhoie / fuz

  Fuzzy search text / notes in the terminal, for any collection of text files

  bash-scriptfzffzf-scriptsripgrepvimnotes-toolbashobsidianobsidian-notescodesnippetcodesnippetsobsidian-pluginroamresearchbatbatcatzshfuzz
  Language:Shell 64

• smasterfree / api-fuzz

  python restful api fuzz test

  pythonfuzzrest-apirestfultesting
  Language:Python 47

• hexian2001 / HRP-Nnepnep-auto-pwn

  基于pwntools+angr的简单CTF AMD64 PWN AUTO FUZZ

  angrautopwnctffuzzpwn
  Language:Python 38
• h4ck

  fagci / h4ck

  Hacking tools. IP fortune, webmap -- web vulns scanner, rtsp brute+fuzz, and more.

  brute-forcefortune-rtspfuzzh4ckhacking-toolsrtspweb-hackingwebmap
  Language:Python 37
• SuperTruder

  ElSicarius / SuperTruder

  A python3 intruder that gave me bounties, easy to use and as fast as fuff

  bugbounty-toolbugbountyintruderfuzzerinfosecfuzz
  Language:Python 36

• zodf0055980 / Yuan-fuzz

  Fuzzing with the generated argument

  fuzzargv-informationaflafl-fuzzfuzzerk-meansk-means-clustering
  Language:C 32

• palekh / fuzzing

  🐰 Tool set for fuzz and stress testing your functions!

  fuzzfuzzingstress-teststress-testingtestingtypescript
  Language:TypeScript 30
• xnuimagefuzzer

  xsscx / xnuimagefuzzer

  XNU Image Fuzzer - iOS App for Fuzzing Images with Objective-C Code covering 12 CGCreateBitmap & CGColorSpace Functions working with Raw Data and String Injection.

  crashexploitfilefuzzfuzzinggraphicsimageresearchsecurityuttxnuimagefuzzerdebugginginterposingiosmacosobjective-cxcodeiosonmac
  Language:Objective-C 29