Fuzzing Libraries

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

To launch all the tests, issue the command: To launch all the tests but the longer ones, issue the command: To launch a specific test category issue the following command:

A friendly automotive security exploration tool. This work was initiated as part of the research project HEAVENS (HEAling Vulnerabilities to ENhance Software Security and Safety), but lives on as a s…

Add this code (ideally, after all other modules are already imported) to the target program: Optionally, add this code at the end of the target program: This should speed up fuzzing considerably, at …

Sulley has been the preeminent open source fuzzer for some time, but has fallen out of maintenance. Like Sulley, boofuzz incorporates all the critical elements of a fuzzer: Unlike Sulley, boofuzz als…

When we started writing Kitty, our goal was to help us fuzz unusual targets --- meaning proprietary and esoteric protocols over non-TCP/IP communication channels --- without writing everything from s…

Grizzly is a modular general purpose browser fuzzing framework. The goal is to create a platform that can be extended via the creation of plug-ins to support multiple combinations of browsers and fuz…

Web path fuzzer Run the following command to install with pip: Run the following commands to manually install: You can start the process of fuzzing files and directories with the following command: H…

• This tool is for educational purposes only. • We are not responsible for any illegal usage of this tool. LFITester is a Python3 tool which tests if a server is vulnerable to Local File Inclusion (L…

Bypass 4xx HTTP response status codes and more. Based on PycURL and Python Requests. Script uses multithreading and is based on brute forcing, and as such, might have false positive results. Script h…

Recommended for developers. It automatically clones the main branch from the frelatage repo, and installs from source. The idea behind the design of Frelatage is the usage of a genetic algorithm to g…

Pull requests are welcome. Feel free to open an issue if you want to add other features.

一款集成了多种老牌工具字典的轻量级目录扫描器，包括御剑后台扫描字典，test404网站备份，web破壳扫描器，御剑1.5扫描字典，御剑专业版字典，wwwscan字典，dirscan字典，dirsafe字典，swebscan等字典已合并去重 支持多线程扫描，可指定线程数。 随机user-agent头。 -x指定X-forward-for头，默认随机。 -f支持导入字典检测。 -o导出html报告 …