web-fuzzing 开源项目推荐（12 个）

six2dez /OneListForAll

Rockyou for web fuzzing

thehlopster /hfuzz

Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templates, web-scanners, seclist, bo0m, and more.

thehlopster /promocode-wordlist

Promocode wordlist

bad-antics /nullsec-webfuzz

Rust web fuzzer - async/await, Tokio, directory brute-force

n0nexist /tFuzzer

tFuzzer is a web fuzzer written in golang

giriaryan694-a11y /Intrivox

Intrivox is a powerful, feature-complete HTTP attack automation tool designed for penetration testers, bug bounty hunters, and security researchers. Built as a free alternative to Burp Suite's Intruder module, Intrivox provides professional-grade fuzzing capabilities without the enterprise price tag.

QYVORA /qyvora-Sekhmet

High-performance, baseline-aware fuzzing and vulnerability discovery framework for multi-target security testing, with adaptive mutation, coverage feedback, corpus management, crash detection, minimization, structured evidence, and reproducible fuzzing campaigns.

G4sp4rCS /htb-academy-skills-assestment-using-web-proxies

Hack the box academy: Skills Assessment - Using Web Proxies

NeiveZ /Web-Fuzzer-Enumerator

clean directory and file discovery for authorized web assessments.

wxwreak /fuzzmap

Fuzzmap is a simple and fast command-line web fuzzing tool written in Go. It allows you to discover hidden directories, files, and endpoints on a target web server using a specified wordlist and concurrent threads.

vzhirnov /post_json_fuzzer

Fuzz any fields of your JSON. Any fields combination you like. Use the available methods, combinators, mutators, strategies. Write your own.

whoot /from-robots-with-love

A Burp/dirsearch optimized wordlist scraped from the robots.txt of the top 100k most visited domains.