SecLists/Fuzzing
2025-08-10 16:56:16 -03:00
..
403 Create 403.md 2023-12-27 13:38:21 -07:00
Amounts chore(wordlist): Re-sync rebase 2025-02-17 22:58:15 -03:00
Databases chore(wordlist): Moved polyglot sql injection wordlist into the 'SQLi' directory 2025-05-08 02:02:53 -03:00
Dates feat(wordlist): Added YYYY-MM-DD dates wordlists (PR #1217) 2025-06-21 19:50:42 -03:00
LFI feat(wordlist): Added /etc/apache2/.htpasswd to LFI fuzzing lists (PR #1223) 2025-06-29 12:19:43 -03:00
User-Agents
XSS chore(wordlist): Moved 'Polyglots' directory into the 'XSS' directory 2025-05-08 02:03:32 -03:00
0-999999-hashgen.py Update 0-999999-hashgen.py 2024-06-02 00:09:26 +04:00
1-4_all_letters_a-z.txt
3-digits-000-999.txt
4-digits-0000-9999.txt
5-digits-00000-99999.txt
6-digits-000000-999999.txt
alphanum-case-extra.txt
alphanum-case.txt
big-list-of-naughty-strings.txt Update big-list-of-naughty-strings.txt 2025-03-02 07:10:51 +02:00
char.txt
command-injection-commix.txt
country-codes-lower-case.txt Split country codes 2024-04-05 00:20:57 +00:00
country-codes-upper-case.txt Split country codes 2024-04-05 00:20:57 +00:00
country-codes.txt
curl-protocols.txt chore(wordlist): Moved 'curl-protocols.txt' wordlist to the 'Fuzzing' directory 2025-08-10 16:56:16 -03:00
doble-uri-hex.txt
email-top-100-domains.txt
environment-identifiers.txt
extension-test.txt
extensions-Bo0oM.txt
extensions-compressed.fuzz.txt
extensions-most-common.fuzz.txt Added .phar 2024-04-23 15:46:20 +05:30
extensions-skipfish.fuzz.txt
file-extensions-all-cases.txt Create file-extensions-all-cases.txt 2023-11-24 22:35:58 +08:00
file-extensions-lower-case.txt Create file-extensions-lower-case.txt 2023-11-24 22:37:11 +08:00
file-extensions-upper-case.txt Create file-extensions-upper-case.txt 2023-11-24 22:36:41 +08:00
file-extensions.txt Update file-extensions.txt 2023-11-24 22:35:12 +08:00
FormatString-Jhaddix.txt
fully-qualified-java-classes.txt added 'fully-qualified-java-classes' to fuzzing lists 2024-09-09 20:12:36 +00:00
fuzz-Bo0oM-friendly.txt Remove empty line 2023-12-01 18:43:33 +01:00
fuzz-Bo0oM.txt
FuzzingStrings-SkullSecurity.org.txt
HTML5sec-Injections-Jhaddix.txt
http-request-methods.txt Add HTTP versb TRACK and DEBUG 2023-10-17 12:39:22 +02:00
IBMMQSeries-channels.txt
JSON.Fuzzing.txt
LDAP-active-directory-attributes.txt
LDAP-active-directory-classes.txt
LDAP-openldap-attributes.txt
LDAP-openldap-classes.txt
LDAP.Fuzzing.txt
login_bypass.txt Add files via upload 2024-10-21 10:23:13 +02:00
Metacharacters.fuzzdb.txt
numeric-fields-only.txt
os-names-mutated.txt Create os-names-mutated.txt 2023-11-24 02:06:49 +08:00
os-names.txt Update os-names.txt 2023-11-24 02:04:48 +08:00
php-magic-methods.txt Add PHP magic methods list 2023-02-21 21:01:07 +01:00
README.md fix(docs): Improved formatting on the fuzzing README.md 2025-01-25 07:10:59 -03:00
special-chars + urlencoded.txt Add files via upload 2024-10-21 10:28:09 +02:00
special-chars.txt
SSI-Injection-Jhaddix.txt
template-engines-expression.txt
template-engines-special-vars.txt
Unicode.txt
UnixAttacks.fuzzdb.txt
URI-hex.txt
URI-XSS.fuzzdb.txt
Windows-Attacks.fuzzdb.txt
XML-FUZZ.txt
XXE-Fuzzing.txt

0-999999-hashgen.py

This tool generates a list of hashes for all numbers from 0 to 999999, and stores them in 0_999999_hashes.txt. The resulting file is aproximately 600MB in size.

The hashes it generates are:

  • MD5
  • SHA-1
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA-3-256
  • BLAKE2b

URI-XSS.fuzzdb.txt

Use for: Fuzzing for XSS vulnerabilities in URIs Source: JBroFuzz

fully-qualified-java-classes.txt

Use for: Fuzzing URL parameters in web applications to test for deserialisation and type confusion vulnerabilities.