kaimi-io / web-fuzz-wordlists
Common Web Managers Fuzz Wordlists
☆172Updated last month
Alternatives and similar repositories for web-fuzz-wordlists:
Users that are interested in web-fuzz-wordlists are comparing it to the libraries listed below
- Payloads for CRLF Injection☆223Updated 6 months ago
- Automated blind-xss search for Burp Suite☆283Updated 5 years ago
- ☆277Updated 2 years ago
- Turbo Intruder Scripts☆221Updated 4 years ago
- Toolkit to detect and keep track on Blind XSS, XXE & SSRF☆295Updated 5 years ago
- Hidden parameters discovery suite☆223Updated 2 years ago
- A combined wordlists for files and directory discovery☆125Updated 3 years ago
- Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)☆168Updated 4 years ago
- SSRF testing tool☆244Updated 2 years ago
- Smart ssrf scanner using different methods like parameter brute forcing in post and get...☆275Updated 4 years ago
- Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.☆176Updated 3 years ago
- You can read the writeup on this script here☆272Updated 4 years ago
- Various Payload wordlists☆235Updated 4 years ago
- A permutation generation tool written in golang☆210Updated 5 years ago
- Scan Victim Backup Directories & Backup Files☆178Updated last year
- Combined port scanning w/ Masscan's speed & Nmap's scanning features.☆150Updated 2 years ago
- Command line tool for testing CRLF injection on a list of domains.☆162Updated last year
- Burp Extension written in Jython to hunt for common vulnerabilities found in websites. Developed by Gaurav Narwani to help people find vu…☆236Updated 4 years ago
- Python tool to find potential Server Side Reqest Forgery (SSRF) vulnerability parameters.☆319Updated 2 weeks ago
- Tool to find the real IP behind CDNs/WAFs like cloudflare using passive recon by retrieving the favicon hash. For the same hash value, al…☆177Updated 4 years ago
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆132Updated 4 years ago
- Burp Bounty profiles compilation, feel free to contribute!☆148Updated 3 years ago
- Burpsuite plugin for Interact.sh☆220Updated 9 months ago
- jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.☆152Updated 4 years ago
- This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path☆103Updated 4 years ago
- Nuclei templates written by us.☆269Updated 3 years ago
- DNS rebinding toolkit☆252Updated last year
- A tool which scrapes public github repositories for common naming conventions in variables, folders and files☆289Updated 10 months ago
- TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.☆313Updated last year
- Burp Extension for easily creating Wordlists☆210Updated 3 years ago