A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

attack injection fuzzing sql-injection bugbounty payloads fuzz burpsuite intruder fuzz-lists burpsuite-engagement burpsuite-intruder

• Updated Sep 27, 2021
• BlitzBasic

Potentially dangerous files

files list web vulnerability fuzz dirbuster

• Updated Jul 28, 2026

Web Fuzzing Box - Web 模糊测试字典与一些Payloads

hacking penetration-testing fuzzing pentesting bugbounty fuzz

• Updated Mar 23, 2026
• HTML

Collection of quality safety articles. Awesome articles.

github java dns security list awesome cloud research web hacking waf xss bug-bounty src pentest hacker fuzz sec redteam bounty-hunters

• Updated Sep 26, 2024

构建优化高效的渗透 fuzz 字典合集

dictionary boom fuzzing blast burp fuzz

• Updated Jun 17, 2025
• PHP

Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

infrastructure security skills dictionary hacking cheatsheet penetration-testing bounty infosec pentesting methodology ctf pentest bypass payload fuzz redteam

• Updated Oct 24, 2026
• Python

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

graphql sql-injection ctf capture-the-flag pentest hacktoberfest fuzz nosql-injection graphql-injection

• Updated Mar 11, 2024
• Python

上传漏洞fuzz字典生成脚本

fuzz upload-vul

• Updated Apr 1, 2021
• Python

OneScan 是一款用于递归目录扫描的 BurpSuite 插件

dir-scanner dir-search burp fuzz burp-plugin burpsuite burp-extensions burpsuite-extender dirscan dir-fuzz

• Updated Jun 24, 2025
• Java

1337 Wordlists for Bug Bounty Hunting

bruteforce wordlist bugbounty fuzz dirsearch ffuf fuzz4bounty

• Updated Nov 8, 2026
• Go

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

scanner scan dict ctf fuzz

• Updated Jul 20, 2022
• Python

Fuzz your Rust code with Google-developed Honggfuzz !

rust security crates fuzzing fuzz-testing fuzzer sanitizer fuzz security-tools security-testing honggfuzz rust-fuzz

• Updated Aug 4, 2026
• Rust

Fast HTTP enumerator

go fast http security enumerator fuzzer fuzz

• Updated Jul 17, 2026
• Go

Fuzz test your application using your OpenAPI or Swagger API definition without coding

swagger openapi python3 api-blueprint fuzzer fuzz

• Updated Apr 13, 2026
• Python

Black box fuzzer for web applications

penetration-testing fuzzing web-security pentesting bugbounty fuzzer blackbox fuzz security-tools black-box-testing

• Updated Jul 20, 2025
• Go

Rust-based framework to Fuzz Solana programs, designed to help you ship secure code.

rust anchor fuzzing fuzz-testing fuzzer fuzz solana

• Updated May 18, 2026
• Rust

Windows Kernel Drivers fuzzer

windows kernel driver ring0 ioctl fuzz

• Updated Mar 15, 2017
• C

qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

security infosec bugbounty vulnerability-detection fuzz

• Updated Feb 12, 2023
• Go

property testing and verification front-end for Rust

fuzz-testing afl fuzz property-testing libfuzzer honggfuzz

• Updated Nov 10, 2026
• C

REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows

api devops rest rest-api fuzzing fuzz fuzzing-framework

• Updated Jan 13, 2022
• F#