web-fuzzer 开源项目推荐（18 个）

0xInfection /TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

stanislav-web /OpenDoor

OWASP 网络侦查与目录发现平台

NESCAU-UFLA /FuzzingTool

Software for fuzzing, used on web application pentestings.

tiagozip /bunbuster

ridiculously fast web & TCP fuzzer designed for brute-forcing directories, subdomains, and files on web servers.

MobSF /CapFuzz

CapFuzz - capture, fuzz & intercept web traffic.

Ice1187 /simple-web-fuzzer

A simple web fuzzer written in Python with async/multi-processing/sequential version.

n0nexist /tFuzzer

tFuzzer is a web fuzzer written in golang

Nachomf112 /port-scanner-menarguez-ia

Mobile port scanner & web fuzzer (Expo + Supabase) for authorized security testing.

guaidao2 /fastfuzz

A Chinese-first web fuzzer in Go with FUZZ placeholders (wfuzz / ffuf style), built around diff judgement: dynamic content is normalised and echoed values restored, so only payloads that really changed the page are reported. | 用 Go 编写、面向中文用户的 Web Fuzz 工具（wfuzz / ffuf 风格的 FUZZ 占位符），核心是差异判定：归一化动态内容、还原回显参数，只报真正让页面发生变化的 payload。

m0rd3caii /fuzzer

Directory Searcher x Python3

n0obit4 /Fuzzpy

A personal web fuzzer

masterccc /Aswf_webfuzz

short web dictionnary

Oveek-Sur /phantomfuzz

Fast async web fuzzer for authorized security testing: autopilot (crawl -> show -> auto-test), SPA JS-intel, IDOR/tamper/race checks, PayloadsAllTheThings built in.

LucasKatashi /shin

Just another web fuzzer.

Helena-Lynd /web-fuzzer

A web fuzzer focused on discovering pages, forms, and basic input vulnerabilities.

wxwreak /fuzzmap

Fuzzmap is a simple and fast command-line web fuzzing tool written in Go. It allows you to discover hidden directories, files, and endpoints on a target web server using a specified wordlist and concurrent threads.

contamuito /xerxes-project

Xerxes Project — modular pentest harness in Rust: plugin architecture, port scanner, subdomain brute, web fuzzer. For authorized security assessments.

NeiveZ /Web-Fuzzer-Enumerator

clean directory and file discovery for authorized web assessments.