fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a fuzzing payload dictionary, a resource discovery wordlist, and a fault injection dataset containing corrupted Unicode, null bytes, and escape codes to trigger application crashes and logic errors. The project includes a security filter bypass list featuring polyglots and encoded strings to evade web application firewalls and input validation filters. It also provides a comprehensive web application penetration testing dataset specifically for identifying flaws such as cross-s
Burp extension to detect alias traversal via NGINX misconfiguration at scale.
Path traversal / LFI fuzzer in Go - 66 encoding bypass techniques, response analysis, goroutine concurrency, wordlist support, proxy (Burp/Caido).
DotDotPwn - The Directory Traversal Fuzzer
File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
The main features of chrispetrou/fdsploit are: Directory Traversal.
Open-source alternatives to chrispetrou/fdsploit include: fuzzdb-project/fuzzdb — fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a… bayotop/off-by-slash — Burp extension to detect alias traversal via NGINX misconfiguration at scale. momenbasel/liffier — Path traversal / LFI fuzzer in Go - 66 encoding bypass techniques, response analysis, goroutine concurrency, wordlist… wireghoul/dotdotpwn — DotDotPwn - The Directory Traversal Fuzzer.