From c4561530b7a35e3b91e5d38130dadfa748381c95 Mon Sep 17 00:00:00 2001 From: "Ignacio J. Perez Portal" <5990@protonmail.com> Date: Sun, 22 Sep 2024 13:14:19 -0300 Subject: [PATCH] feat(docs): Added documentation for 'fully-qualified-java-classes.txt' wordlist --- Fuzzing/README.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/Fuzzing/README.md b/Fuzzing/README.md index 1070caef..3b2fee8a 100644 --- a/Fuzzing/README.md +++ b/Fuzzing/README.md @@ -18,4 +18,9 @@ Use for: Fuzzing for [XSS vulnerabilities in URIs](https://www.youtube.com/watch?v=NJulOqWjA9k) Source: [JBroFuzz](https://sourceforge.net/projects/jbrofuzz/) - https://sourceforge.net/p/jbrofuzz/code/HEAD/tree/tar/README-FUZZERS -- https://sourceforge.net/p/jbrofuzz/code/HEAD/tree/tar/fuzzers.jbrf \ No newline at end of file +- https://sourceforge.net/p/jbrofuzz/code/HEAD/tree/tar/fuzzers.jbrf + + +## fully-qualified-java-classes.txt + +Use for: Fuzzing URL parameters in **web applications** to test for **deserialisation** and **type confusion** vulnerabilities.