A Summary of Fuzzing Tools and Dictionaries For Bug Bounty Hunters

This page summarizes the projects mentioned and recommended in the original post on dev.to

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • AwesomeXSS

    Awesome XSS stuff

  • AwesomeXSS https://github.com/s0md3v/AwesomeXSS

  • PayloadsAllTheThings

    A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  • payload https://github.com/swisskyrepo/PayloadsAllTheThings

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • big-list-of-naughty-strings

    The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

  • fuzz.txt

    Potentially dangerous files

  • fuzzdb

    Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

  • FuzzDB https://github.com/fuzzdb-project/fuzzdb

  • dictionaries

    Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks (by bl4de)

  • Open-Redirect-Payloads

    Open Redirect Payloads

  • payload https://github.com/cujanovic/Open-Redirect-Payloads

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • bugbounty-cheatsheet

    A list of interesting payloads, tips and tricks for bug bounty hunters.

  • xss-payload-list

    🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

  • WordList

  • Bug-Bounty-Wordlists

    A repository that includes all the important wordlists used while bug hunting.

  • OneListForAll

    Rockyou for web fuzzing

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts