A collection of useful lists for Penetration Testing & Bug Bounty - Content Discovery, Payloads, Variables, Sandbox Escaping, etc
☆107May 21, 2026Updated 5 months ago
Alternatives and similar repositories for fuzzlists
Users that are interested in fuzzlists are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool box with 174 useful and common Linux tools for penetration testing and security audits.☆16Sep 19, 2023Updated 3 years ago
- Attempt zone transfers on domains☆19Jul 12, 2021Updated 5 years ago
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆37Apr 9, 2026Updated 6 months ago
- SidePeek.js is a curated set of JavaScript payloads for browser-based recon. Run them in DevTools or as bookmarklets to uncover hidden AP…☆23May 13, 2025Updated last year
- Writeup finder from medium or other☆22Sep 11, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Ollama AI Analyzer runs directly on your local computer, using Ollama's AI models to analyze your HTTP requests and responses. This means…☆33Mar 1, 2025Updated last year
- A wordlist generator tool, that allows you to supply a set of words, giving you the possibility to craft multiple variations from the giv…☆126Sep 19, 2023Updated 3 years ago
- Extracts URLs from OSINT Archives for Security Insights☆193Oct 25, 2026Updated last week
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆25Jul 13, 2025Updated last year
- Cfd (Cloudflare detector) is a tool that allows you to check one or more domains to see if they are protected by CloudFlare or not. The c…☆17Mar 30, 2023Updated 3 years ago
- IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …☆45Feb 24, 2025Updated last year
- ☆15Apr 5, 2023Updated 3 years ago
- A useful script to gather ASNs and prefixes of your target, while you are doing a wide recon process.☆12May 23, 2023Updated 3 years ago
- Hand-made Improved Nuclei Templates!🪴☆13Jun 12, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A command-line tool for recursively spidering webpages for URLs. It works by actively traversing websites, following links embedded in we…☆110Updated this week
- quick and dirty proof-of-concept to hide shells in images☆51Jun 27, 2024Updated 2 years ago
- 1337 Wordlists for Bug Bounty Hunting☆989Updated this week
- ☆29Jul 14, 2023Updated 3 years ago
- A command line tool that reads from stdin and strips ANSI color codes from the input.☆10Feb 11, 2023Updated 3 years ago
- Chrome MV3 extension that auto-discovers JS endpoints and parameter keys from code and network traffic☆13Aug 19, 2025Updated last year
- ☆633Dec 19, 2025Updated 10 months ago
- This script will run your custom nuclei ssl.yaml to gather more assets from your target.☆11May 22, 2023Updated 3 years ago
- ☆24Mar 22, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- WebChecker is a simple tool used in pentesting to detect what CMS a website is running & more.☆13Nov 14, 2022Updated 3 years ago
- The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.☆10Jun 11, 2020Updated 6 years ago
- Automated HTTP Request Repeating With Burp Suite☆38Apr 3, 2023Updated 3 years ago
- Nuclei Templates☆14Jan 13, 2023Updated 3 years ago
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆312Mar 31, 2024Updated 2 years ago
- Python tool to generate crafted JWTs, exploiting the algorithm confusion vulnerability in JWT signature validation. Useful for security …☆25Jun 6, 2026Updated 4 months ago
- An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms.☆210Apr 21, 2025Updated last year
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- Smart Setup Server For BugBounty☆25Aug 21, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Exploit for Symfony CVE-2024-50340 (forked eos)☆30Nov 22, 2024Updated last year
- i will upload more templates here to share with the comunity.☆574Apr 17, 2024Updated 2 years ago
- Burp Suite extension that enhances Burp Active Scan by adding template engine specific SSTI payloads.☆28Feb 20, 2024Updated 2 years ago
- ☆959Dec 26, 2025Updated 10 months ago
- A curated list wordlists for bruteforcing and fuzzing☆88Apr 3, 2023Updated 3 years ago
- Quickly filter in-scope domains & urls for bug bounty☆21Mar 19, 2021Updated 5 years ago
- Arescan is a powerful web directory discovery tool that helps you uncover hidden directories and links on any website. By performing a br…☆32May 8, 2026Updated 5 months ago