How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a fuzzing payload dictionary, a resource discovery wordlist, and a fault injection dataset containing corrupted Unicode, null bytes, and escape codes to trigger application crashes and logic errors. The project includes a security filter bypass list featuring polyglots and encoded strings to evade web application firewalls and input validation filters. It also provides a comprehensive web application penetration testing dataset specifically for identifying flaws such as cross-s
Wfuzz is a web application fuzzing framework that automates the injection of payloads into HTTP requests to discover hidden resources, parameters, and vulnerabilities. It functions as a content discovery scanner, a brute-force tool for credential guessing, and a plugin-based vulnerability scanner, all within a single modular system. The tool distinguishes itself through its plugin-based extensibility, allowing custom Python modules to add new payload sources, output printers, or scanning logic without modifying core code. It supports concurrent request dispatch using thread-based parallelism
DotDotPwn - The Directory Traversal Fuzzer
The main features of wireghoul/dotdotpwn are: Fuzzing Tools, Attack Payloads, Directory Traversal.
Open-source alternatives to wireghoul/dotdotpwn include: fuzzdb-project/fuzzdb — fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a… xmendez/wfuzz — Wfuzz is a web application fuzzing framework that automates the injection of payloads into HTTP requests to discover… 1n3/brutex. assetnote/batchql — GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. assetnote/kiterunner — Contextual Content Discovery Tool. 7iosecurity/xss-payloads — XSS Payloads.
