SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–24 of 24 · Most stars
Web path scanner
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
A fork and successor of the Sulley Fuzzing Framework
DOM fuzzer
Automated testing to find logic and performance bugs in database systems
A curated list of awesome Fuzzing(or Fuzz Testing) for software security
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE
- awesome-lists
- voip-security
- hacking-voip
- sip-security
Fuzzer for Linux Kernel Drivers
Janus: a state-of-the-art file system fuzzer on Linux
- fuzzing
- fuzzer
- lkl
- filesystem
A coverage-guided REST API fuzzer developed on top of LibAFL
- api-fuzzer
- fuzzer
- fuzzing
- rest-api-test
🔍A cutting edge context aware GraphQL API fuzzing tool!
- api-testing-framework
- graphql
- api
- automated-testing
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
🤖 Repeat tests. Repeat tests. Repeat tests.
- testing
- test
- test-automation
- data-driven
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
- fuzzer
- fuzzing
- kernel-fuzzer
- windows-kernel
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
A tool to enable fuzzing for Spectre vulnerabilities
Generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or fuzzing Danish targets.
Code for ASE'21 Paper "CorbFuzz: Checking Browser Security Policies with Fuzzing"
- fuzzing
- concolic-execution
- browser-security
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
- automotive-security
- can-bus
- can-bus-hacking
- can-bus-security