Repository Index

Web path scanner

• fuzzer
• fuzzing
• python
• security

Web application fuzzer

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

• phishing
• typosquatting
• domains
• dns

A high performance offensive security tool for reconnaissance and vulnerability scanning

• reconnaissance
• scanner
• vulnerability-assessment
• vulnerability-scanner

Catch API bugs before your users do

• hypothesis
• pytest
• swagger
• cli

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

A fork and successor of the Sulley Fuzzing Framework

• fuzzing
• python
• security

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration

DOM fuzzer

• fuzzing
• security
• dom

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

• awesome-list
• awesome
• fuzzing
• fuzz-testing

pure-python ECDSA signature/verification and ECDH key agreement

• python
• elliptic-curves
• cryptography
• digital-signatures

A friendly car security exploration tool for the CAN bus

• python
• can-bus
• security-scanner
• security-testing

Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels

• fuzzing
• kernel
• intel-pt
• processor-trace

Malware Analysis Tool using Function Level Fuzzy Hashing

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

• fuzzing
• network
• ids
• firewall

Generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or fuzzing Danish targets.

• fuzzing
• infosec
• osint
• pentesting

Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.

• automotive-security
• can-bus
• can-bus-hacking
• can-bus-security