The Offensive Manual Web Application Penetration Testing Framework.
OWASP Web Recon & Directory Discovery Platform
Software for fuzzing, used on web application pentestings.
ridiculously fast web & TCP fuzzer designed for brute-forcing directories, subdomains, and files on web servers.
CapFuzz - capture, fuzz & intercept web traffic.
A simple web fuzzer written in Python with async/multi-processing/sequential version.
tFuzzer is a web fuzzer written in golang
Mobile port scanner & web fuzzer (Expo + Supabase) for authorized security testing.
A Chinese-first web fuzzer in Go with FUZZ placeholders (wfuzz / ffuf style), built around diff judgement: dynamic content is normalised and echoed values restored, so only payloads that really changed the page are reported. | 用 Go 编写、面向中文用户的 Web Fuzz 工具（wfuzz / ffuf 风格的 FUZZ 占位符），核心是差异判定：归一化动态内容、还原回显参数，只报真正让页面发生变化的 payload。
short web dictionnary
Fast async web fuzzer for authorized security testing: autopilot (crawl -> show -> auto-test), SPA JS-intel, IDOR/tamper/race checks, PayloadsAllTheThings built in.
A web fuzzer focused on discovering pages, forms, and basic input vulnerabilities.
Fuzzmap is a simple and fast command-line web fuzzing tool written in Go. It allows you to discover hidden directories, files, and endpoints on a target web server using a specified wordlist and concurrent threads.
Xerxes Project — modular pentest harness in Rust: plugin architecture, port scanner, subdomain brute, web fuzzer. For authorized security assessments.
clean directory and file discovery for authorized web assessments.
To associate your repository with the web-fuzzer topic, visit your repo's landing page and select "manage topics."
