SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–24 of 29 · Most stars
Web path scanner
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
Randomized testing for Go
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
An step by step fuzzing tutorial. A GitHub Security Lab initiative
Catch API bugs before your users do
Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
A fork and successor of the Sulley Fuzzing Framework
DOM fuzzer
Automated testing to find logic and performance bugs in database systems
A curated list of awesome Fuzzing(or Fuzz Testing) for software security
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE
- awesome-lists
- voip-security
- hacking-voip
- sip-security
Fuzzer for Linux Kernel Drivers
Janus: a state-of-the-art file system fuzzer on Linux
- fuzzing
- fuzzer
- lkl
- filesystem
A coverage-guided REST API fuzzer developed on top of LibAFL
- api-fuzzer
- fuzzer
- fuzzing
- rest-api-test
🔍A cutting edge context aware GraphQL API fuzzing tool!
- api-testing-framework
- graphql
- api
- automated-testing
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
🤖 Repeat tests. Repeat tests. Repeat tests.
- testing
- test
- test-automation
- data-driven
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
- fuzzer
- fuzzing
- kernel-fuzzer
- windows-kernel