The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
Repository Index
58,136 visible repositories in the index
1–24 of 39 · Most stars
OSS-Fuzz - continuous fuzzing for open source software.
Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
- wordlist
- password
- password-strength
- password-safety
Accessibility engine for automated Web UI testing
- axe
- a11y
- accessibility
syzkaller is an unsupervised coverage-guided kernel fuzzer
Scalable fuzzing infrastructure.
An online request replication and TCP stream replay tool, ideal for real testing, performance testing, stability testing, stress testing, load testing, smoke testing, and more.
- testing-tools
- testing
- replay-mysql-traffic
- replay-http-traffic
Pa11y is your automated accessibility testing pal
PowerMock is a Java framework that allows you to unit test code normally regarded as untestable.
AutoFixture is an open source library for .NET designed to minimize the 'Arrange' phase of your unit tests in order to maximize maintainability. Its primary goal is to allow developers to focus on what is being tested rather than how to setup the test scenario, by making it easier to create object graphs containing test data.
- assertion-library
- assertions
- auto-mocking
- autofixture
A gem providing "time travel", "time freezing", and "time acceleration" capabilities, making it simple to test time-dependent code. It provides a unified method to mock Time.now, Date.today, and DateTime.now in a single call.
Chaos testing, network emulation, and stress testing tool for containers
- docker
- chaos
- network-emulator
- testing-tools
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
A minimal benchmark for scalability, speed and accuracy of commonly used open source implementations (R packages, Python scikit-learn, H2O, xgboost, Spark MLlib etc.) of the top machine learning algorithms for binary classification (random forests, gradient boosted trees, deep neural networks etc.).
- machine-learning
- data-science
- r
- python
Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡
- ai
- autogen
- automation
- browser
Typed TypeScript SDK for direct and managed social platform integrations, with capability checks, explicit outcomes, and deterministic testing.
- api-integration
- bluesky
- bun
- developer-tools
AIDA-64-Extreme: Pre-Activated Desktop Edition with Full Feature Set
- aida64
- aida64-extreme-compatibility-check
- aida64-extreme-detailed-reporting
- aida64-extreme-hardware-diagnostics
Shift-left API Integration | Auto-fix integration drift before integration. Specmatic turns API specifications into executable contracts, continuously verifying that every change made by AI coding agents and engineers stays true to the desired behaviour. Ship AI-ready APIs 10x faster, from intent to implementation, with Spec-Driven API Development.
- contract-testing
- microservices
- contract-driven-development
- cdd
Lint the rendered UI: catches overflowing text, low contrast, overlaps, broken responsive layouts, emoji icons and more in any web framework. Built for AI coding agents.
- accessibility
- ai-agents
- claude-code
- contrast
Fuzzer for Linux Kernel Drivers
Generate random data for MongoDB
Attacking MQTT systems with Mosquittos (scalability and load testing utilities for MQTT environments)
:wheelchair:: Custom commands for Playwright to run accessibility (a11y) checks with axe-core
- playwright
- accesibility
- axe
- axe-core
Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
- ipv6
- security-assessments