A collection of useful lists for Penetration Testing & Bug Bounty - Content Discovery, Payloads, Variables, Sandbox Escaping, etc
☆105May 21, 2026Updated 2 months ago
Alternatives and similar repositories for fuzzlists
Users that are interested in fuzzlists are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool box with 174 useful and common Linux tools for penetration testing and security audits.☆16Sep 19, 2023Updated 2 years ago
- A wordlist generator tool, that allows you to supply a set of words, giving you the possibility to craft multiple variations from the giv…☆124Sep 19, 2023Updated 2 years ago
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆36Apr 9, 2026Updated 3 months ago
- Template Nuclei SSTI☆34Nov 18, 2025Updated 8 months ago
- A command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embed…☆111Dec 8, 2025Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hand-made Improved Nuclei Templates!🪴☆13Jun 12, 2023Updated 3 years ago
- Writeup finder from medium or other☆19Sep 11, 2024Updated last year
- SidePeek.js is a curated set of JavaScript payloads for browser-based recon. Run them in DevTools or as bookmarklets to uncover hidden AP…☆22May 13, 2025Updated last year
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆24Jul 13, 2025Updated last year
- Extracts URLs from OSINT Archives for Security Insights☆189Updated this week
- quick and dirty proof-of-concept to hide shells in images☆51Jun 27, 2024Updated 2 years ago
- Ollama AI Analyzer runs directly on your local computer, using Ollama's AI models to analyze your HTTP requests and responses. This means…☆33Mar 1, 2025Updated last year
- ☆29May 22, 2024Updated 2 years ago
- ☆20Apr 5, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Attempt zone transfers on domains☆19Jul 12, 2021Updated 5 years ago
- MacroExploit use in excel sheet☆21Jun 12, 2023Updated 3 years ago
- IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …☆45Feb 24, 2025Updated last year
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆314Mar 31, 2024Updated 2 years ago
- ☆14Nov 8, 2024Updated last year
- Python tool to generate crafted JWTs, exploiting the algorithm confusion vulnerability in JWT signature validation. Useful for security …☆25Jun 6, 2026Updated last month
- Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist☆433Aug 25, 2024Updated last year
- Nuclei Templates☆14Jan 13, 2023Updated 3 years ago
- This tool is intended for bounty hunters, the script installs and launches the best set of tools for expanding the attack surface, for W…☆12Apr 22, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Arescan is a powerful web directory discovery tool that helps you uncover hidden directories and links on any website. By performing a br…☆32May 8, 2026Updated 2 months ago
- 1337 Wordlists for Bug Bounty Hunting☆973Updated this week
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- 🕵️♂️🔍 A tool with several scanning techniques that extracts live IP addresses from a list of IP addresses or CIDR notations.☆52May 14, 2023Updated 3 years ago
- Exploit for Symfony CVE-2024-50340 (forked eos)☆29Nov 22, 2024Updated last year
- Smart Setup Server For BugBounty☆26Aug 21, 2023Updated 2 years ago
- uforall is a fast url crawler this tool crawl all URLs number of different sources, alienvault,WayBackMachine,urlscan,commoncrawl☆54Nov 3, 2025Updated 8 months ago
- An XSS exploitation command-line interface and payload generator.☆1,437Jan 19, 2025Updated last year
- OpenSSH Pre-Auth Double Free CVE-2023-25136 POC☆47Apr 21, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Jupyter Guide☆15Jan 12, 2022Updated 4 years ago
- i will upload more templates here to share with the comunity.☆572Apr 17, 2024Updated 2 years ago
- Automated HTTP Request Repeating With Burp Suite☆38Apr 3, 2023Updated 3 years ago
- ☆634Dec 19, 2025Updated 7 months ago
- Chameleon Wordlists☆15Sep 13, 2022Updated 3 years ago
- X9 a tool to create URLs with many parameter☆31Feb 8, 2026Updated 5 months ago
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 8 months ago