Home / Tools / fuzzer

Packages that use the fuzz testing principle, ie 'throwing' random inputs at the subject to see what happens.

Tool count: 233

Name Version Description Category Website
0d1n 1:263.2d723ae Web security tool to make fuzzing at HTTP inputs, made in C with libCurl. webapp fuzzer scanner
abuse-ssl-bypass-waf 7.c28f98e Bypassing WAF by abusing SSL/TLS Ciphers. webapp fuzzer
afl 2.57b Security-oriented fuzzer using compile-time instrumentation and genetic algorithms fuzzer binary
aflplusplus 1:v4.20c.r0.g1d17210d American Fuzzing Lop fuzzer with community patches and additional features. fuzzer
aggroargs 51.c032446 Bruteforce commandline buffer overflows, linux, aggressive arguments. exploitation fuzzer
ajpfuzzer 0.6 A command-line fuzzer for the Apache JServ Protocol (ajp13). fuzzer
astra 487.57c1e41 Automated Security Testing For REST API's. webapp fuzzer
atlas 7.77bd6c8 Open source tool that can suggest sqlmap tampers to bypass WAF/IDS/IPS. webapp fuzzer
atscan 2455.5f774e9 Server, Site and Dork Scanner. scanner webapp fuzzer exploitation automation
backfuzz 1:1.b0648de A network protocol fuzzing toolkit. fuzzer networking
bbscan 48.43c1088 A tiny Batch weB vulnerability Scanner. webapp scanner fuzzer
bfuzz 60.fdaefc0 Input based fuzzer tool for browsers. fuzzer
bing-lfi-rfi 0.1 This is a python script for searching Bing for sites that may have local and remote file inclusion vulnerabilities. webapp scanner fuzzer
birp 65.b2e108a A tool that will assist in the security assessment of mainframe applications served over TN3270. scanner recon fuzzer
bluebox-ng 1:1.1.0 A GPL VoIP/UC vulnerability scanner. voip scanner fuzzer
boofuzz v0.4.2.r15.g8d56073 fuzzer
browser-fuzzer 3 Browser Fuzzer 3 fuzzer
brutexss 54.ba753df Cross-Site Scripting Bruteforcer. webapp fuzzer
bss 0.8 Bluetooth stack smasher / fuzzer bluetooth fuzzer scanner
bt_audit 0.1.1 Bluetooth audit bluetooth fuzzer
bunny 0.93 A closed loop, high-performance, general purpose protocol-blind fuzzer for C programs. fuzzer
burpsuite 1:2024.3.1.1 An integrated platform for attacking web applications (free edition). fuzzer proxy scanner webapp
cantoolz 1:425.82d330b Framework for black-box CAN network analysis https://asintsov.blogspot.de/. automobile recon fuzzer scanner
capfuzz 34.97ac312 Capture, fuzz and intercept web traffic. sniffer fuzzer
cecster 5.15544cb A tool to perform security testing against the HDMI CEC (Consumer Electronics Control) and HEC (HDMI Ethernet Channel) protocols. scanner fuzzer
chipsec 4:2069.10ed1329 Framework for analyzing the security of PC platforms including hardware, system firmware (BIOS/UEFI), and platform components. hardware binary forensic scanner fuzzer
choronzon 4.d702c31 An evolutionary knowledge-based fuzzer. fuzzer
cirt-fuzzer 1.0 A simple TCP/UDP protocol fuzzer. fuzzer
cisco-auditing-tool 1 Perl script which scans cisco routers for common vulnerabilities. Checks for default passwords, easily guessable community names, and the IOS history bug. Includes support for plugins and scanning multiple hosts. cracker fuzzer scanner
cmsfuzz 5.6be5a98 Fuzzer for wordpress, cold fusion, drupal, joomla, and phpnuke. webapp scanner fuzzer
conscan 1.2 A blackbox vulnerability scanner for the Concre5 CMS. fuzzer scanner webapp
cookie-cadger 1.08 An auditing tool for Wi-Fi or wired Ethernet connections. fuzzer scanner
crackql 1.0.r53.gac26a44 GraphQL password brute-force and fuzzing utility webapp exploitation fuzzer
crlf-injector 9.bd6db06 A python script for testing CRLF injecting issues. fuzzer webapp
dalfox 1414.2f6dd5c Parameter Analysis and XSS Scanning tool. webapp fuzzer
darkbing 0.1 A tool written in python that leverages bing for mining data on systems that may be susceptible to SQL injection. scanner fuzzer webapp
dharma 98.6b1e511 Generation-based, context-free grammar fuzzer. fuzzer
dhcpig 2:109.b580dc3 Enhanced DHCPv4 and DHCPv6 exhaustion and fuzzing script written in python using scapy network library. scanner fuzzer dos
dizzy 2.0 A Python based fuzzing framework with many features. fuzzer networking
domato 123.8083920 DOM fuzzer. fuzzer
doona 145.7a4796c A fork of the Bruteforce Exploit Detector Tool (BED). fuzzer exploitation
dotdotpwn 3.0.2 The Transversal Directory Fuzzer exploitation fuzzer
dpscan 0.1 Drupal Vulnerabilty Scanner. scanner webapp fuzzer
dr-checker 140.ea63c0f A Soundy Vulnerability Detection Tool for Linux Kernel Drivers. exploitation fuzzer
drozer 2.4.4 A security testing framework for Android - Precompiled binary from official repository. mobile scanner fuzzer
dudley 16.ea14ca6 Block-based vulnerability fuzzing framework. fuzzer
easyfuzzer 3.6 A flexible fuzzer, not only for web, has a CSV output for efficient output analysis (platform independant). fuzzer webapp
faraday 9269.4625bd369 A new concept (IPE) Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analyze of the generated data during the process of a security audit. scanner exploitation fuzzer fingerprint automation misc
faradaysec 12301.9874e77e4 Collaborative Penetration Test and Vulnerability Management Platform. scanner exploitation fuzzer fingerprint automation misc
fdsploit 26.4522f53 A File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool. webapp fuzzer exploitation
feroxbuster 2.7.1.r11.g53e3420 A fast, simple, recursive content discovery tool written in Rust. webapp scanner fuzzer
ffuf 1:v2.1.0.r3.gde9ac86 Fast web fuzzer written in Go. webapp fuzzer
fhttp 1.3 This is a framework for HTTP related attacks. It is written in Perl with a GTK interface, has a proxy for debugging and manipulation, proxy chaining, evasion rules, and more. webapp scanner fuzzer fingerprint dos
filebuster 95.f2b04c7 An extremely fast and flexible web fuzzer. webapp fuzzer
filefuzz 1.0 A binary file fuzzer for Windows with several options. windows fuzzer
fimap 2:1.00 A little tool for local and remote file inclusion auditing and exploitation. fimap is a little python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. exploitation fuzzer
firewalk 5.0 An active reconnaissance network security tool fuzzer scanner
flyr 76.4926ecc Block-based software vulnerability fuzzing framework. fuzzer
fockcache 10.3e7efa9 Tool to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. webapp fuzzer
frisbeelite 1.2 A GUI-based USB device fuzzer. fuzzer
ftester 1.0 A tool designed for testing firewall filtering policies and Intrusion Detection System (IDS) capabilities. fuzzer
ftp-fuzz 1:1337 The master of all master fuzzing scripts specifically targeted towards FTP server sofware. fuzzer
fuddly 569.fd2c4d0 Fuzzing and Data Manipulation Framework (for GNU/Linux). fuzzer
fusil 1.5 A Python library used to write fuzzing programs. fuzzer
fuzzball2 0.7 A little fuzzer for TCP and IP options. It sends a bunch of more or less bogus packets to the host of your choice. fuzzer
fuzzdb 475.5656ab2 Attack and Discovery Pattern Dictionary for Application Fault Injection Testing fuzzer
fuzzdiff 1.0 A simple tool designed to help out with crash analysis during fuzz testing. It selectively 'un-fuzzes' portions of a fuzzed file that is known to cause a crash, re-launches the targeted application, and sees if it still crashes. fuzzer
fuzzowski 41.e39f665 A Network Protocol Fuzzer made by NCCGroup based on Sulley and BooFuzz. fuzzer networking
fuzztalk An XML driven fuzz testing framework that emphasizes easy extensibility and reusability. windows fuzzer
gloom 1:93.cd6e927 Linux Penetration Testing Framework. scanner exploitation recon fuzzer social
goofuzz 1.2.4.r0.g99dc919 A Bash script that uses advanced Google search techniques to obtain sensitive information in files or directories without making requests to the web server. fuzzer recon scanner
grammarinator 330.f3ffa71 A random test generator / fuzzer that creates test cases according to an input ANTLR v4 grammar. fuzzer misc
graphql-path-enum 21.29fa505 Tool that lists the different ways of reaching a given type in a GraphQL schema. webapp exploitation fuzzer
graphqlmap 63.59305d7 Scripting engine to interact with a graphql endpoint for pentesting purposes. webapp exploitation fuzzer
greenbone-security-assistant 9.0.1 Greenbone Security Assistant (gsa) - OpenVAS web frontend scanner fuzzer exploitation
grr 17.791ed5a High-throughput fuzzer and emulator of DECREE binaries. fuzzer
gvmd 8.0.1 Greenbone Vulnerability Manager - The database backend for the Greenbone Vulnerability Management (GVM) framework scanner fuzzer exploitation
hexorbase 2:6 A database application designed for administering and auditing multiple database servers simultaneously from a centralized location. It is capable of performing SQL queries and bruteforce attacks against common database servers (MySQL, SQLite, Microsoft SQL Server, Oracle, PostgreSQL). fuzzer scanner
hodor 1.01be107 A general-use fuzzer that can be configured to use known-good input and delimiters in order to fuzz specific locations. fuzzer
homepwn 31.0803981 Swiss Army Knife for Pentesting of IoT Devices. scanner recon fuzzer exploitation
honggfuzz 4104.348a4721 A general-purpose fuzzer with simple, command-line interface. fuzzer hardware
http-fuzz 1:0.1 A simple http fuzzer. fuzzer
httpforge 11.02.01 A set of shell tools that let you manipulate, send, receive, and analyze HTTP messages. These tools can be used to test, discover, and assert the security of Web servers, apps, and sites. An accompanying Python library is available for extensions. webapp scanner fuzzer recon
hwk 0.4 Collection of packet crafting and wireless network flooding tools dos fuzzer scanner wireless
ifuzz 1.0 A binary file fuzzer with several options. fuzzer
ikeprober 1.12 Tool crafting IKE initiator packets and allowing many options to be manually set. Useful to find overflows, error conditions and identifiyng vendors fuzzer
inguma 0.1.1 A free penetration testing and vulnerability discovery toolkit entirely written in python. Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler. cracker disassembler exploitation fuzzer scanner
injectus 12.3c01fa0 Simple python tool that goes through a list of URLs trying CRLF and open redirect payloads. webapp scanner fuzzer
isip 2.fad1f10 Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. voip networking fuzzer dos
jbrofuzz 2.5 Web application protocol fuzzer that emerged from the needs of penetration testing. fuzzer
jok3r 447.0761996 Network and Web Pentest Framework. webapp scanner fuzzer networking
joomlavs 254.eea7500 A black box, Ruby powered, Joomla vulnerability scanner. webapp scanner fuzzer
jsql-injection 0.95 A Java application for automatic SQL database injection. webapp exploitation fuzzer
kitty 321.f19e811 Fuzzing framework written in python. fuzzer
kitty-framework 352.cb07609 Fuzzing framework written in python. fuzzer
krbrelayx 49.4eb9c4f Kerberos unconstrained delegation abuse toolkit. scanner fuzzer spoof networking
leviathan 35.a1a1d8c A mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. scanner cracker webapp fuzzer exploitation
lfi-autopwn 3.0 A Perl script to try to gain code execution on a remote server via LFI exploitation fuzzer
lfi-fuzzploit 1.1 A simple tool to help in the fuzzing for, finding, and exploiting of local file inclusion vulnerabilities in Linux-based PHP applications. webapp fuzzer exploitation
lfi-scanner 4.0 This is a simple perl script that enumerates local file inclusion attempts when given a specific target. scanner fuzzer webapp
lfi-sploiter 1.0 This tool helps you exploit LFI (Local File Inclusion) vulnerabilities. Post discovery, simply pass the affected URL and vulnerable parameter to this tool. You can also use this tool to scan a URL for LFI vulnerabilities. webapp fuzzer exploitation
lfimap 1:162.245a448 This script is used to take the highest beneficts of the local file include vulnerability in a webserver. webapp fuzzer
liffy 1:33.89dd4f8 A Local File Inclusion Exploitation tool. webapp exploitation fuzzer
littleblackbox 0.1.3 Penetration testing tool, search in a collection of thousands of private SSL keys extracted from various embedded devices. scanner fuzzer crypto
log4j-bypass 33.f5c92f9 Log4j web app tester that includes WAF bypasses. webapp fuzzer scanner
log4j-scan 88.07f7e32 A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228. webapp scanner fuzzer
logmepwn 24.f257a8f A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability. scanner fuzzer
lorsrf bbb.r0.g91c26ec Find the parameters that can be used to find SSRF or Out-of-band resource load. webapp scanner fuzzer
maligno 2.5 An open source penetration testing tool written in python, that serves Metasploit payloads. It generates shellcode with msfvenom and transmits it over HTTP or HTTPS. scanner fuzzer exploitation
malybuzz 1.0 A Python tool focused in discovering programming faults in network software. fuzzer
manul 197.f525df9 A coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS. fuzzer binary
mdk3 v6 WLAN penetration tool wireless fuzzer
mdk4 4.2 Proof-of-Concept tool to exploit common IEEE 802.11 protocol weaknesses. wireless fuzzer
melkor 1.0 An ELF fuzzer that mutates the existing data in an ELF sample given to create orcs (malformed ELFs), however, it does not change values randomly (dumb fuzzing), instead, it fuzzes certain metadata with semi-valid values through the use of fuzzing rules (knowledge base). fuzzer binary
metasploit 6.4.2 Advanced open-source platform for developing, testing, and using exploit code exploitation fuzzer scanner recon networking
mitm6 33.8e75884 Pwning IPv4 via IPv6. scanner fuzzer spoof networking
mongoaudit 222.70b83e8 A powerful MongoDB auditing and pentesting tool . scanner fuzzer
nemesis 331.5aee868 command-line network packet crafting and injection utility networking fuzzer spoof
network-app-stress-tester 19.df75391 Network Application Stress Testing Yammer. dos networking fuzzer
netzob 1.0.2 An open source tool for reverse engineering, traffic generation and fuzzing of communication protocols. reversing fuzzer networking
nikto 2.5.0 A web server scanner which performs comprehensive tests against web servers for multiple items scanner webapp fuzzer
nili 39.285220a Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing. scanner reversing fuzzer
nimbostratus 54.c7c206f Tools for fingerprintinging and exploiting Amazon cloud infrastructures. fingerprint exploitation fuzzer
notspikefile 1:0.1 A Linux based file format fuzzing tool fuzzer
nsoq 1.9.5 A Network Security Tool for packet manipulation that allows a large number of options. networking scanner fuzzer
nullscan 1.0.1 A modular framework designed to chain and automate security tests. automation scanner recon fingerprint networking fuzzer exploitation
oat 1.3.1 A toolkit that could be used to audit security within Oracle database servers. fuzzer
ohrwurm 1.7a1182a A small and simple RTP fuzzer. fuzzer
openvas 6.0.1 The OpenVAS scanning Daemon scanner fuzzer exploitation
openvas-cli 1.4.5 The OpenVAS Command-Line Interface scanner fuzzer exploitation
openvas-libraries 9.0.2 The OpenVAS libraries scanner fuzzer exploitation
openvas-manager 7.0.3 A layer between the OpenVAS Scanner and various client applications scanner fuzzer exploitation
openvas-scanner 22.4.0 The OpenVAS scanning Daemon scanner fuzzer exploitation
oscanner 1.0.6 An Oracle assessment framework developed in Java. fuzzer
owtf 2187.af993ecb The Offensive (Web) Testing Framework. webapp automation scanner fuzzer
pappy-proxy 77.e1bb049 An intercepting proxy for web application testing. webapp proxy scanner fuzzer recon
parampampam 45.9171018 This tool for brute discover GET and POST parameters. webapp fuzzer
peach 3.0.202 A SmartFuzzer that is capable of performing both generation and mutation based fuzzing. fuzzer
peach-fuzz 55.404e8ee Simple vulnerability scanning framework. fuzzer code-audit
pentbox 1.8 A security suite that packs security and stability testing oriented tools for networks and systems. fuzzer scanner
pmcma 1.00 Automated exploitation of invalid memory writes (being them the consequences of an overflow in a writable section, of a missing format string, integer overflow, variable misuse, or any other type of memory corruption). exploitation automation fuzzer
portmanteau 1.0 An experimental unix driver IOCTL security tool that is useful for fuzzing and discovering device driver attack surface. fuzzer
powerfuzzer 1_beta Powerfuzzer is a highly automated web fuzzer based on many other Open Source fuzzers available (incl. cfuzzer, fuzzled, fuzzer.pl, jbrofuzz, webscarab, wapiti, Socket Fuzzer). It can detect XSS, Injections (SQL, LDAP, commands, code, XPATH) and others. fuzzer
pret 108.a04bd04 Printer Exploitation Toolkit - The tool that made dumpster diving obsolete. exploitation fuzzer recon scanner
profuzz 9.aa6dded Simple PROFINET fuzzer based on Scapy. fuzzer
pulsar 55.3c61178 Protocol Learning and Stateful Fuzzing. fuzzer
pureblood 37.2c5ce07 A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter. automation webapp scanner fuzzer
pyersinia 49.73f4056 Network attack tool like yersinia but written in Python. networking fuzzer dos voip scanner exploitation
pyjfuzz 157.f777067 Python JSON Fuzzer. fuzzer
pytbull 19.3d82a54 A python based flexible IDS/IPS testing framework shipped with more than 300 tests. scanner fuzzer
qark 301.ba1b265 Tool to look for several security related Android application vulnerabilities. mobile fuzzer scanner exploitation
radamsa 0.7 General purpose mutation based fuzzer fuzzer
rapidscan 221.296a20b The Multi-Tool Web Vulnerability Scanner. webapp scanner recon fingerprint fuzzer exploitation
ratproxy 1.58 A passive web application security assessment tool fuzzer proxy scanner webapp
responder 4:v3.1.4.0.r9.g1a2f2fd A LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. scanner fuzzer spoof networking
responder-multirelay 1:360.24e7b7c A LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2 (multirelay version), scanner fuzzer spoof networking
restler-fuzzer 8:397.0277c5b First stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. webapp fuzzer
s3-fuzzer 4.0a2a6f0 A concurrent, command-line AWS S3 Fuzzer. fuzzer
samesame 68.a9bcd7b Command line tool to generate crafty homograph strings. fuzzer
sandsifter 2.8375e61 The x86 processor fuzzer. fuzzer hardware
sb0x 19.04f40fe A simple and Lightweight framework for Penetration testing. scanner fuzzer cracker backdoor recon
scout2 1182.5d86d46 Security auditing tool for AWS environments. scanner fuzzer
sfuzz 200.e1b62bd A simple fuzzer. fuzzer
shortfuzzy 0.1 A web fuzzing script written in perl. webapp fuzzer scanner
skipfish 2.10b A fully automated, active web application security reconnaissance tool fuzzer scanner webapp
sloth-fuzzer 39.9f7f59a A smart file fuzzer. fuzzer
smartphone-pentest-framework 104.fc45347 Repository for the Smartphone Pentest Framework (SPF). mobile scanner fuzzer
smbexec 2:59.a54fc14 A rapid psexec style attack with samba tools. scanner recon fuzzer exploitation
smod 53.7eb8423 A modular framework with every kind of diagnostic and offensive feature you could need in order to pentest modbus protocol. scanner fuzzer recon dos
smtp-fuzz 1.0 Simple smtp fuzzer. fuzzer
smtptx 1.0 A very simple tool used for sending simple email and do some basic email testing from a pentester perspective. scanner fuzzer
sn00p 0.8 A modular tool written in bourne shell and designed to chain and automate security tools and tests. automation scanner recon fingerprint networking fuzzer exploitation
snmp-fuzzer 0.1.1 SNMP fuzzer uses Protos test cases with an entirely new engine written in Perl. fuzzer networking
soapui 5.7.0 The Swiss-Army Knife for SOAP Testing. proxy fuzzer
socketfuzz 26.089add2 Simple socket fuzzer. fuzzer
spaf 11.671a976 Static Php Analysis and Fuzzer. webapp fuzzer code-audit
spartan 23.babdd7d TCHunt-ng attempts to reveal encrypted files stored on a filesystem. The program is successful in finding TrueCrypt, VeraCrypt, CipherShed containers, EncFS encrypted files, PGP/GPG encrypted messages, OpenSSH and PEM private keys, password databases, and files made up of random data. fingerprint fuzzer
spiderpig-pdffuzzer 0.1 A javascript pdf fuzzer fuzzer
spike 2.9 IMMUNITYsec's fuzzer creation kit in C fuzzer
spike-fuzzer 2.9 IMMUNITYsec's fuzzer creation kit in C. fuzzer
sploitego 153.d9568dc Maltego Penetration Testing Transforms. fuzzer scanner
sps 4.3 A Linux packet crafting tool. Supports IPv4, IPv6 including extension headers, and tunneling IPv6 over IPv4. networking dos fuzzer
sqlbrute 1.0 Brute forces data out of databases using blind SQL injection. fuzzer webapp
sqlmap 1.8 Automatic SQL injection and database takeover tool webapp exploitation fuzzer
sqlninja 0.2.999 A tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. exploitation fuzzer webapp
sshfuzz 1.0 A SSH Fuzzing utility written in Perl that uses Net::SSH2. fuzzer
ssrfmap 104.f688ec9 Automatic SSRF fuzzer and exploitation tool. webapp scanner fuzzer exploitation
stews 1.0.0.r7.gc7bba5a A Security Tool for Enumerating WebSockets. webapp scanner fingerprint fuzzer
sulley 4:1.0.bff0dd1 A pure-python fully automated and unattended fuzzing framework. fuzzer
taof 0.3.2 Taof is a GUI cross-platform Python generic network protocol fuzzer. fuzzer
tcpcontrol-fuzzer 2:0.1 2^6 TCP control bit fuzzer (no ECN or CWR). fuzzer networking
tcpjunk 2.9.03 A general tcp protocols testing and hacking utility. exploitation fuzzer
termineter 203.9311d6d Smart meter testing framework fuzzer
tftp-fuzz 1:1337 Master TFTP fuzzing script as part of the ftools series of fuzzers. fuzzer
thefuzz 160.b4c2c80 CLI fuzzing tool. fuzzer
tlsfuzzer 1715.5c7e569 SSL and TLS protocol test suite and fuzzer. crypto fuzzer
trinity 5192.e7187245 A Linux System call fuzzer. fuzzer
udp-hunter 4.b95cce5 Network assessment tool for various UDP Services covering both IPv4 and IPv6 protocols. scanner fuzzer fingerprint
udsim 33.b379464 A graphical simulator that can emulate different modules in a vehicle and respond to UDS request. scanner fuzzer automobile
umap 25.3ad8121 The USB host security assessment tool. scanner fuzzer
unifuzzer 5.3385a3b A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer. fuzzer binary
uniofuzz 2:1337 The universal fuzzing tool for browsers, web services, files, programs and network services/ports fuzzer
uniscan 6.3 A simple Remote File Include, Local File Include and Remote Command Execution vulnerability scanner. fuzzer scanner webapp
upnp-pentest-toolkit 1.1 UPnP Pentest Toolkit for Windows. windows scanner recon fuzzer
uppwn 9.f69dec4 A script that automates detection of security flaws on websites' file upload systems'. webapp fuzzer
vane 1899.48f9ab5 A vulnerability scanner which checks the security of WordPress installations using a black box approach. scanner webapp fuzzer
vbscan 1:39.2b1ce48 A black box vBulletin vulnerability scanner written in perl. webapp fuzzer scanner
viproy-voipkit 1:82.52b27db VoIP Pen-Test Kit for Metasploit Framework exploitation fuzzer scanner
vsaudit 21.2cbc47b VOIP Security Audit Framework. voip scanner fuzzer
vulscan 2.0 A module which enhances nmap to a vulnerability scanner scanner fuzzer
w13scan 430.432b835 Passive Security Scanner. webapp scanner fuzzer
w3af 1.6.49 Web Application Attack and Audit Framework. fuzzer scanner webapp
wafninja 25.379cd98 A tool which contains two functions to attack Web Application Firewalls. webapp fuzzer
wafpass 50.4211785 Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF. webapp fuzzer
wapiti 3.1.8.r72.gf9029514 A vulnerability scanner for web applications. It currently search vulnerabilities like XSS, SQL and XPath injections, file inclusions, command execution, LDAP injections, CRLF injections... fuzzer scanner webapp
webscarab 20120422.001828 Framework for analysing applications that communicate using the HTTP and HTTPS protocols fuzzer proxy scanner webapp
webshag 1.10 A multi-threaded, multi-platform web server audit tool. fuzzer scanner webapp
websploit 4.0.4 An Open Source Project For, Social Engineering Works, Scan, Crawler & Analysis Web, Automatic Exploiter, Support Network Attacks exploitation fuzzer scanner social
webxploiter 56.c03fe6b An OWASP Top 10 Security scanner. webapp exploitation fuzzer scanner
weirdaal 331.c14e36d AWS Attack Library. webapp scanner fuzzer
wfuzz 1155.1b695ee Utility to bruteforce web applications to find their not linked resources. fuzzer webapp
witchxtool 1.1 A perl script that consists of a port scanner, LFI scanner, MD5 bruteforcer, dork SQL injection scanner, fresh proxy scanner, and a dork LFI scanner. webapp scanner exploitation fuzzer
wpscan 1:3.8.25 Black box WordPress vulnerability scanner webapp fuzzer scanner
wsfuzzer 1.9.5 A Python tool written to automate SOAP pentesting of web services. fuzzer webapp
xspear 1:144.57bb7b4 Powerfull XSS Scanning and Parameter analysis tool&gem. webapp fuzzer
xss-freak 17.e361766 An XSS scanner fully written in Python3 from scratch. webapp scanner fuzzer
xsser 2:1.8 A penetration testing tool for detecting and exploiting XSS vulnerabilites. webapp fuzzer exploitation
xsss 0.40b A brute force cross site scripting scanner. webapp fuzzer scanner
xssscan 1:17.7f1ea90 Command line tool for detection of XSS attacks in URLs. Based on ModSecurity rules from OWASP CRS. webapp scanner fuzzer
xsssniper 79.02b59af An automatic XSS discovery tool webapp fuzzer
yawast 1:0.11.0 The YAWAST Antecedent Web Application Security Toolkit. webapp scanner fuzzer
zaproxy 2.14.0 Integrated penetration testing tool for finding vulnerabilities in web applications webapp fuzzer proxy
zzuf 0.15 Transparent application input fuzzer. fuzzer