SecLists/Fuzzing
2025-11-27 22:16:50 -03:00
..
403 Create 403.md 2023-12-27 13:38:21 -07:00
Amounts chore(wordlist): Re-sync rebase 2025-02-17 22:58:15 -03:00
Databases chore(wordlist): Moved polyglot sql injection wordlist into the 'SQLi' directory 2025-05-08 02:02:53 -03:00
Dates feat(wordlist): Added YYYY-MM-DD dates wordlists (PR #1217) 2025-06-21 19:50:42 -03:00
LFI feat(wordlist): Added /etc/apache2/.htpasswd to LFI fuzzing lists (PR #1223) 2025-06-29 12:19:43 -03:00
User-Agents
XSS chore(wordlist): Moved 'Polyglots' directory into the 'XSS' directory 2025-05-08 02:03:32 -03:00
0-999999-hashgen.py Update 0-999999-hashgen.py 2024-06-02 00:09:26 +04:00
1-4_all_letters_a-z.txt
3-digits-000-999.txt
4-digits-0000-9999.txt
5-digits-00000-99999.txt
6-digits-000000-999999.txt
alphanum-case-extra.txt
alphanum-case.txt
big-list-of-naughty-strings.txt Update big-list-of-naughty-strings.txt 2025-03-02 07:10:51 +02:00
char.txt
command-injection-commix.txt
curl-protocols.txt chore(wordlist): Moved 'curl-protocols.txt' wordlist to the 'Fuzzing' directory 2025-08-10 16:56:16 -03:00
doble-uri-hex.txt
email-top-100-domains.txt
environment-identifiers.txt
extension-test.txt
extensions-Bo0oM.txt
extensions-compressed.fuzz.txt
extensions-most-common.fuzz.txt Added .phar 2024-04-23 15:46:20 +05:30
extensions-skipfish.fuzz.txt
file-extensions-all-cases.txt Create file-extensions-all-cases.txt 2023-11-24 22:35:58 +08:00
file-extensions-lower-case.txt Create file-extensions-lower-case.txt 2023-11-24 22:37:11 +08:00
file-extensions-upper-case.txt Create file-extensions-upper-case.txt 2023-11-24 22:36:41 +08:00
file-extensions.txt Update file-extensions.txt 2023-11-24 22:35:12 +08:00
FormatString-Jhaddix.txt
fully-qualified-java-classes.txt added 'fully-qualified-java-classes' to fuzzing lists 2024-09-09 20:12:36 +00:00
fuzz-Bo0oM-friendly.txt Remove empty line 2023-12-01 18:43:33 +01:00
fuzz-Bo0oM.txt
FuzzingStrings-SkullSecurity.org.txt
HTML5sec-Injections-Jhaddix.txt
http-request-methods.txt
IBMMQSeries-channels.txt
JSON.Fuzzing.txt
LDAP-active-directory-attributes.txt
LDAP-active-directory-classes.txt
LDAP-openldap-attributes.txt
LDAP-openldap-classes.txt
LDAP.Fuzzing.txt
login_bypass.txt chore(wordlist): Removed duplicates from login_bypass.txt 2025-11-27 22:16:50 -03:00
Metacharacters.fuzzdb.txt
numeric-fields-only.txt
os-names-mutated.txt Create os-names-mutated.txt 2023-11-24 02:06:49 +08:00
os-names.txt Update os-names.txt 2023-11-24 02:04:48 +08:00
php-magic-methods.txt
README.md chore(wordlist): Moved 'rstp.txt' wordlist from fuzzing to Discovery/Web-Content/Service-Specific 2025-11-27 22:11:51 -03:00
regional_country-codes-lower-case.txt chore(wordlist): Added 'regional_' prefix to country codes wordlists 2025-11-27 21:51:04 -03:00
regional_country-codes-upper-case.txt chore(wordlist): Added 'regional_' prefix to country codes wordlists 2025-11-27 21:51:04 -03:00
regional_country-codes.txt chore(wordlist): Added 'regional_' prefix to country codes wordlists 2025-11-27 21:51:04 -03:00
regional_languages-codes.txt feat(wordlist): Added locale-codes wordlist and language-codes wordlist 2025-11-27 21:53:18 -03:00
regional_locale-codes.txt feat(wordlist): Added locale-codes wordlist and language-codes wordlist 2025-11-27 21:53:18 -03:00
special-chars + urlencoded.txt Add files via upload 2024-10-21 10:28:09 +02:00
special-chars.txt
SSI-Injection-Jhaddix.txt
template-engines-expression.txt
template-engines-special-vars.txt
Unicode.txt
UnixAttacks.fuzzdb.txt
URI-hex.txt
URI-XSS.fuzzdb.txt
Windows-Attacks.fuzzdb.txt
XML-FUZZ.txt
XXE-Fuzzing.txt

0-999999-hashgen.py

This tool generates a list of hashes for all numbers from 0 to 999999, and stores them in 0_999999_hashes.txt. The resulting file is aproximately 600MB in size.

The hashes it generates are:

  • MD5
  • SHA-1
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA-3-256
  • BLAKE2b

URI-XSS.fuzzdb.txt

Use for: Fuzzing for XSS vulnerabilities in URIs Source: JBroFuzz

fully-qualified-java-classes.txt

Use for: Fuzzing URL parameters in web applications to test for deserialisation and type confusion vulnerabilities.