How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a fuzzing payload dictionary, a resource discovery wordlist, and a fault injection dataset containing corrupted Unicode, null bytes, and escape codes to trigger application crashes and logic errors. The project includes a security filter bypass list featuring polyglots and encoded strings to evade web application firewalls and input validation filters. It also provides a comprehensive web application penetration testing dataset specifically for identifying flaws such as cross-s
Wfuzz is a web application fuzzing framework that automates the injection of payloads into HTTP requests to discover hidden resources, parameters, and vulnerabilities. It functions as a content discovery scanner, a brute-force tool for credential guessing, and a plugin-based vulnerability scanner, all within a single modular system. The tool distinguishes itself through its plugin-based extensibility, allowing custom Python modules to add new payload sources, output printers, or scanning logic without modifying core code. It supports concurrent request dispatch using thread-based parallelism
DotDotPwn - The Directory Traversal Fuzzer
The main features of wireghoul/dotdotpwn are: Fuzzing Tools, Attack Payloads, Directory Traversal.
Projects with overlapping indexed features include: fuzzdb-project/fuzzdb — fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a… xmendez/wfuzz — Wfuzz is a web application fuzzing framework that automates the injection of payloads into HTTP requests to discover… 1n3/brutex. assetnote/batchql — GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. assetnote/kiterunner — Contextual Content Discovery Tool. 7iosecurity/xss-payloads — XSS Payloads.
