nu11pointer / fuzzlists
A collection of useful lists for Penetration Testing & Bug Bounty - Content Discovery, Payloads, Variables, Sandbox Escaping, etc
☆56Updated 4 months ago
Alternatives and similar repositories for fuzzlists:
Users that are interested in fuzzlists are comparing it to the libraries listed below
- Striping CDN IPs from a list of IP Addresses☆75Updated 2 years ago
- A simple automation tool to detect lfi, rce and ssti vulnerability☆55Updated 2 years ago
- A Lightning-Fast DNS Resolver written in Rust 🦀☆67Updated 2 months ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆43Updated 10 months ago
- simple recon tool to help you for searching vulnerability on web server☆73Updated last week
- Python tool to test known techniques to bypass 403 and 401 HTTP responses.☆35Updated last year
- A simple plugin to export JS files from one or multiple targets☆40Updated last year
- bash script for automating subdomain enumeration process either passive or active☆27Updated last month
- ☆51Updated 2 years ago
- Here Are Some Bug Bounty Resource From Twitter☆87Updated this week
- ☆76Updated 3 years ago
- Inside403 is a powerful and versatile web security testing tool designed to assess the robustness of web pages and directories against 40…☆30Updated last year
- ☆72Updated 8 months ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆49Updated 2 years ago
- Run ffuf with the appropriate options to brute-force the directories using the awesome different wordlists.☆23Updated last year
- Filter URLs to save your time.☆59Updated 2 years ago
- BBSSRF - Bug Bounty SSRF is a powerful tool to check SSRF OOB connection☆38Updated last year
- A BurpSuite extension to deploy an OpenVPN config file to DigitalOcean and set up a SOCKS proxy to route traffic through it☆48Updated 11 months ago
- Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE☆52Updated 3 months ago
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆74Updated last year
- ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, …☆32Updated last year
- A "Spring4Shell" vulnerability scanner.☆50Updated last week
- Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite☆77Updated 2 years ago
- A curated list wordlists for bruteforcing and fuzzing☆80Updated last year
- Web Hacking and Red Teaming MindMap☆69Updated last year
- ☆43Updated last year
- ☆50Updated 7 months ago
- An offensive security tool used to enumerate and spray passwords for O365 accounts on both Managed and Federated AD services.☆47Updated 2 years ago
- Web cache poisoning vulnerability scanner.☆64Updated 2 years ago
- Tool for testing reflections in the HTTP responses☆60Updated last year