fuzzdb-project / fuzzdbLinks
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
☆8,780Updated 2 years ago
Alternatives and similar repositories for fuzzdb
Users that are interested in fuzzdb are comparing it to the libraries listed below
Sorting:
- Web application fuzzer☆6,372Updated last year
- A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…☆3,881Updated 4 years ago
- A Tool for Domain Flyovers☆5,892Updated 3 years ago
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆4,106Updated last year
- Web path scanner☆13,818Updated 2 weeks ago
- EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.☆5,595Updated last week
- Fast subdomains enumeration tool for penetration testers☆10,759Updated last year
- Next generation web scanner☆6,338Updated 2 months ago
- Scripted Local Linux Enumeration & Privilege Escalation Checks☆7,775Updated 2 years ago
- Git All the Payloads! A collection of web attack payloads.☆3,874Updated 2 years ago
- Automated All-in-One OS Command Injection Exploitation Tool☆5,578Updated last week
- Fast web fuzzer written in Go☆15,384Updated 8 months ago
- A toolkit for testing, tweaking and cracking JSON Web Tokens☆6,305Updated 8 months ago
- WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.☆6,111Updated 3 months ago
- A swiss army knife for pentesting networks☆9,023Updated 2 years ago
- Nishang - Offensive PowerShell for red team, penetration testing and offensive security.☆9,674Updated last year
- Linux privilege escalation auditing tool☆6,344Updated last year
- A list of public penetration test reports published by several consulting firms and academic security groups.☆9,304Updated last month
- HTTP parameter discovery suite.☆5,989Updated 10 months ago
- Weaponized web shell☆3,472Updated 3 months ago
- Automated NoSQL database enumeration and web application exploitation tool.☆3,213Updated 4 months ago
- Impacket is a collection of Python classes for working with network protocols.☆15,308Updated this week
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆6,242Updated this week
- A repository with 3 tools for pwn'ing websites with .git repositories available☆4,114Updated 2 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆8,689Updated last month
- In-depth attack surface mapping and asset discovery☆13,954Updated last week
- A curated list of amazingly awesome Burp Extensions☆3,343Updated 10 months ago
- Fast passive subdomain enumeration tool.☆12,816Updated this week
- A python script that finds endpoints in JavaScript files☆4,241Updated last year
- GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems☆12,484Updated 3 months ago