11 repositorios
Awesome GitHub RepositoriesFuzzing Tools
Extensions for automating fuzzing and payload generation within web requests.
Explore 11 awesome GitHub repositories matching part of an awesome list · Fuzzing Tools. Refine with filters or upvote what's useful.
Awesome Fuzzing Tools GitHub Repositories
Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
- h3xstream/http-script-generator
h3xstream/http-script-generator
This extension generates scripts to reissue a selected request. The scripts can be run outside of Burp. It can be useful to script attacks such as second order SQL injection, padding oracle, fuzzing encoded value, etc.
Generates scripts to reproduce HTTP requests for fuzzing.
Java - pinnace/burp-jwt-fuzzhelper-extension
pinnace/burp-jwt-fuzzhelper-extension
JSON Web Token (JWT) support for Burp Intruder. This extension adds a payload processor for fuzzing JWT claims.
Specialized extension for fuzzing JSON Web Tokens.
Python - team-firebugs/burp-lfi-tests
Team-Firebugs/Burp-LFI-tests
Fuzzing for LFI using Burpsuite
Automates testing for Local File Inclusion vulnerabilities.
- jiangsir404/xss-sql-fuzz
jiangsir404/Xss-Sql-Fuzz
burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz
Automatically injects XSS and SQL payloads into request parameters.
Python - mseclab/burp-pyjfuzz
mseclab/burp-pyjfuzz
Burp Suite plugin which implement PyJFuzz for fuzzing web application.
Implements web application fuzzing using a dedicated engine.
Python - mgeeky/burpcontextawarefuzzer
mgeeky/burpContextAwareFuzzer
BurpSuite's payload-generation extension aiming at applying fuzzed test-cases depending on the type of payload (integer, string, path; JSON; XML; GWT; binary) and following encoding-scheme applied originally.
Generates context-aware test cases based on payload types.
Python - floyd-fuh/burp-httpfuzzer
floyd-fuh/burp-httpfuzzer
A simple random HTTP fuzzer. This plugin adds ActiveScan checks that fuzz the HTTP request. Using this fuzzer with any standard HTTP server (Apache, Nginx, etc.) is usually useless, but can be fun. It can be used to see the different error conditions a server and the web application code can run…
Performs random fuzzing of HTTP request parameters.
Python - raz0r/burp-radamsa
raz0r/burp-radamsa
burp-radamsa
Integrates the Radamsa fuzzer for mutation-based testing.
- nscuro/bradamsa-ng
nscuro/bradamsa-ng
A Burp Suite extension for Radamsa-powered fuzzing with Intruder
Enables Radamsa-powered fuzzing directly within the Intruder tool.
Java - gosecure/burp-fuzzy-encoding-generator
GoSecure/burp-fuzzy-encoding-generator
Quickly test various encoding for a given value in Burp Intruder
Tests various character encodings for specific input values.
Kotlin - huvuqu/fuzz18plus
huvuqu/fuzz18plus
Advance of fuzzing for Web pentest. Based on Burp extension, send HTTP request template out to Python fuzzer.
Sends HTTP request templates to external Python fuzzing engines.
Java
