Fuzzing
Explore 25 curated tools and resources
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
LATEST ADDITIONS
EvoMaster is an open-source tool that automatically generates system-level test cases for web APIs using AI-driven techniques.
ffufai is an AI-enhanced wrapper for ffuf that automatically suggests file extensions for web fuzzing based on the target URL and headers.
A Python-based tool for identifying and exploiting file inclusion and directory traversal vulnerabilities in web applications.
A collection of payloads and methodologies for web pentesting.
A collection of tests for Local File Inclusion (LFI) vulnerabilities using Burp Suite.
A powerful tool for identifying and exploiting Cross-Site Scripting (XSS) vulnerabilities.
A GitHub repository for fuzzing and testing file formats
A fast and flexible web fuzzer for identifying vulnerabilities in web applications
A tool for detecting and exploiting vulnerabilities in web applications
A tool for mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
Self-hosted Fuzzing-As-A-Service platform for continuous developer-driven fuzzing.
A comprehensive collection of security assessment lists for security testers.
A simple file format fuzzer for Android that can fuzz multiple readers at once
App-Ray offers comprehensive security analysis and compliance solutions for mobile applications.
Boofuzz is a network protocol fuzzing tool that aims to fuzz everything
Repository of tools for testing iPhone messaging by Project Zero
A WebSocket Manipulation Proxy with a user interface to capture, intercept, and send custom messages for WebSocket and Socket.IO communications.
PLC-side fuzzing tool for uncovering vulnerabilities in ICS control applications.
A Burp Suite plugin for automatically adding XSS and SQL payload to fuzz
An image with commonly used tools for creating a pentest environment easily and quickly, with detailed instructions for launching in a VPS.
A repository containing material for Android greybox fuzzing with AFL++ Frida mode