SecLists/Fuzzing
2025-11-27 22:16:50 -03:00
..
403
Amounts
Databases
Dates
LFI
User-Agents
XSS
0-999999-hashgen.py
1-4_all_letters_a-z.txt
3-digits-000-999.txt
4-digits-0000-9999.txt
5-digits-00000-99999.txt
6-digits-000000-999999.txt
alphanum-case-extra.txt
alphanum-case.txt
big-list-of-naughty-strings.txt
char.txt
command-injection-commix.txt
curl-protocols.txt
doble-uri-hex.txt
email-top-100-domains.txt
environment-identifiers.txt
extension-test.txt
extensions-Bo0oM.txt
extensions-compressed.fuzz.txt
extensions-most-common.fuzz.txt
extensions-skipfish.fuzz.txt
file-extensions-all-cases.txt
file-extensions-lower-case.txt
file-extensions-upper-case.txt
file-extensions.txt
FormatString-Jhaddix.txt
fully-qualified-java-classes.txt
fuzz-Bo0oM-friendly.txt
fuzz-Bo0oM.txt
FuzzingStrings-SkullSecurity.org.txt
HTML5sec-Injections-Jhaddix.txt
http-request-methods.txt
IBMMQSeries-channels.txt
JSON.Fuzzing.txt
LDAP-active-directory-attributes.txt
LDAP-active-directory-classes.txt
LDAP-openldap-attributes.txt
LDAP-openldap-classes.txt
LDAP.Fuzzing.txt
login_bypass.txt chore(wordlist): Removed duplicates from login_bypass.txt 2025-11-27 22:16:50 -03:00
Metacharacters.fuzzdb.txt
numeric-fields-only.txt
os-names-mutated.txt
os-names.txt
php-magic-methods.txt
README.md chore(wordlist): Moved 'rstp.txt' wordlist from fuzzing to Discovery/Web-Content/Service-Specific 2025-11-27 22:11:51 -03:00
regional_country-codes-lower-case.txt
regional_country-codes-upper-case.txt
regional_country-codes.txt
regional_languages-codes.txt
regional_locale-codes.txt
special-chars + urlencoded.txt
special-chars.txt
SSI-Injection-Jhaddix.txt
template-engines-expression.txt
template-engines-special-vars.txt
Unicode.txt
UnixAttacks.fuzzdb.txt
URI-hex.txt
URI-XSS.fuzzdb.txt
Windows-Attacks.fuzzdb.txt
XML-FUZZ.txt
XXE-Fuzzing.txt

0-999999-hashgen.py

This tool generates a list of hashes for all numbers from 0 to 999999, and stores them in 0_999999_hashes.txt. The resulting file is aproximately 600MB in size.

The hashes it generates are:

  • MD5
  • SHA-1
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA-3-256
  • BLAKE2b

URI-XSS.fuzzdb.txt

Use for: Fuzzing for XSS vulnerabilities in URIs Source: JBroFuzz

fully-qualified-java-classes.txt

Use for: Fuzzing URL parameters in web applications to test for deserialisation and type confusion vulnerabilities.