admin/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2025-06-20 09:50:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
SecLists/Fuzzing
History
ItsIgnacioPortal a1f65aa545
chore(wordlist): Moved 'Polyglots' directory into the 'XSS' directory
2025-05-08 02:03:32 -03:00
..
403
Create 403.md
2023-12-27 13:38:21 -07:00
Amounts
chore(wordlist): Re-sync rebase
2025-02-17 22:58:15 -03:00
Databases
chore(wordlist): Moved polyglot sql injection wordlist into the 'SQLi' directory
2025-05-08 02:02:53 -03:00
LFI
syntax:fix(wordlist): Fixed whitespace in "LFI-gracefulsecurity-windows.txt"
2024-11-23 09:40:25 +01:00
User-Agents
Replace ' ' with ' ' (Empty Characters)
2021-08-28 21:05:13 +01:00
XSS
chore(wordlist): Moved 'Polyglots' directory into the 'XSS' directory
2025-05-08 02:03:32 -03:00
0-999999-hashgen.py
Update 0-999999-hashgen.py
2024-06-02 00:09:26 +04:00
1-4_all_letters_a-z.txt
Create 1-4_all_letters_a-z.txt
2019-11-07 21:50:55 +05:30
3-digits-000-999.txt
Rename "_" -> "-" & found a few new homes
2018-10-15 13:08:10 +01:00
4-digits-0000-9999.txt
Rename "_" -> "-" & found a few new homes
2018-10-15 13:08:10 +01:00
5-digits-00000-99999.txt
Rename "_" -> "-" & found a few new homes
2018-10-15 13:08:10 +01:00
6-digits-000000-999999.txt
Rename "_" -> "-" & found a few new homes
2018-10-15 13:08:10 +01:00
alphanum-case-extra.txt
rename 's/_/-/g'
2017-08-23 14:55:06 +01:00
alphanum-case.txt
rename 's/_/-/g'
2017-08-23 14:55:06 +01:00
big-list-of-naughty-strings.txt
Update big-list-of-naughty-strings.txt
2025-03-02 07:10:51 +02:00
char.txt
Changing permissions to everything matches - 0644
2016-05-17 12:04:45 +01:00
command-injection-commix.txt
Sort out a few more filenmae issues
2019-04-10 11:32:07 +01:00
country-codes-lower-case.txt
Split country codes
2024-04-05 00:20:57 +00:00
country-codes-upper-case.txt
Split country codes
2024-04-05 00:20:57 +00:00
country-codes.txt
Update country-codes.txt
2022-04-26 19:50:07 +02:00
doble-uri-hex.txt
rename 's/_/-/g'
2017-08-23 14:55:06 +01:00
email-top-100-domains.txt
Update email-top-100-domains.txt
2020-11-03 13:06:10 +01:00
environment-identifiers.txt
Add sandbox, sb and stage
2022-06-27 12:31:20 +12:00
extension-test.txt
Quick rename of files
2018-03-05 11:03:11 +00:00
extensions-Bo0oM.txt
added devops extensions - .text, .qa. etc.
2022-03-03 11:23:21 -05:00
extensions-compressed.fuzz.txt
Quick rename
2019-08-13 12:50:53 +01:00
extensions-most-common.fuzz.txt
Added .phar
2024-04-23 15:46:20 +05:30
extensions-skipfish.fuzz.txt
Quick rename
2019-08-13 12:50:53 +01:00
file-extensions-all-cases.txt
Create file-extensions-all-cases.txt
2023-11-24 22:35:58 +08:00
file-extensions-lower-case.txt
Create file-extensions-lower-case.txt
2023-11-24 22:37:11 +08:00
file-extensions-upper-case.txt
Create file-extensions-upper-case.txt
2023-11-24 22:36:41 +08:00
file-extensions.txt
Update file-extensions.txt
2023-11-24 22:35:12 +08:00
FormatString-Jhaddix.txt
Sort out a few more filenmae issues
2019-04-10 11:32:07 +01:00
fully-qualified-java-classes.txt
added 'fully-qualified-java-classes' to fuzzing lists
2024-09-09 20:12:36 +00:00
fuzz-Bo0oM-friendly.txt
Remove empty line
2023-12-01 18:43:33 +01:00
fuzz-Bo0oM.txt
Update fuzz-Bo0oM.txt
2021-10-07 11:03:42 +02:00
FuzzingStrings-SkullSecurity.org.txt
Close #291 - Fix encoding issues
2019-05-08 11:04:00 +01:00
HTML5sec-Injections-Jhaddix.txt
Close #291 - Fix encoding issues
2019-05-08 11:04:00 +01:00
http-request-methods.txt
Add HTTP versb TRACK and DEBUG
2023-10-17 12:39:22 +02:00
IBMMQSeries-channels.txt
Fix formatting
2021-11-24 10:13:43 +00:00
JSON.Fuzzing.txt
Replace ' ' with ' ' (Empty Characters)
2021-08-28 21:05:13 +01:00
LDAP-active-directory-attributes.txt
add standard ldap attribute and classes lists
2021-01-20 15:38:59 +00:00
LDAP-active-directory-classes.txt
add standard ldap attribute and classes lists
2021-01-20 15:38:59 +00:00
LDAP-openldap-attributes.txt
add standard ldap attribute and classes lists
2021-01-20 15:38:59 +00:00
LDAP-openldap-classes.txt
add standard ldap attribute and classes lists
2021-01-20 15:38:59 +00:00
LDAP.Fuzzing.txt
Quick rename
2019-08-13 12:50:53 +01:00
login_bypass.txt
Add files via upload
2024-10-21 10:23:13 +02:00
Metacharacters.fuzzdb.txt
Quick rename of files
2018-03-05 11:03:11 +00:00
numeric-fields-only.txt
Quick move about
2018-03-21 17:47:29 +00:00
os-names-mutated.txt
Create os-names-mutated.txt
2023-11-24 02:06:49 +08:00
os-names.txt
Update os-names.txt
2023-11-24 02:04:48 +08:00
php-magic-methods.txt
Add PHP magic methods list
2023-02-21 21:01:07 +01:00
README.md
fix(docs): Improved formatting on the fuzzing README.md
2025-01-25 07:10:59 -03:00
special-chars + urlencoded.txt
Add files via upload
2024-10-21 10:28:09 +02:00
special-chars.txt
Add "-" and remove duplicate "_" entry
2021-07-13 14:42:14 +01:00
SSI-Injection-Jhaddix.txt
strip trailing whitespace
2020-05-27 14:26:51 +01:00
template-engines-expression.txt
Add an expression using expression inlining for Thymeleaf
2020-09-13 11:04:15 +02:00
template-engines-special-vars.txt
Update
2020-11-05 16:41:54 +01:00
Unicode.txt
Sort out a few more filenmae issues
2019-04-10 11:32:07 +01:00
UnixAttacks.fuzzdb.txt
strip trailing whitespace
2020-05-27 14:26:51 +01:00
URI-hex.txt
Sort out a few more filenmae issues
2019-04-10 11:32:07 +01:00
URI-XSS.fuzzdb.txt
Close #291 - Fix encoding issues
2019-05-08 11:04:00 +01:00
Windows-Attacks.fuzzdb.txt
strip trailing whitespace
2020-05-27 14:26:51 +01:00
XML-FUZZ.txt
Fix Fuzzing Types (Fixes #339)
2019-10-05 00:35:43 +09:30
XXE-Fuzzing.txt
Replace ' ' with ' ' (Empty Characters)
2021-08-28 21:05:13 +01:00

README.md

0-999999-hashgen.py

This tool generates a list of hashes for all numbers from 0 to 999999, and stores them in 0_999999_hashes.txt. The resulting file is aproximately 600MB in size.

The hashes it generates are:

  • MD5
  • SHA-1
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA-3-256
  • BLAKE2b

URI-XSS.fuzzdb.txt

Use for: Fuzzing for XSS vulnerabilities in URIs Source: JBroFuzz

fully-qualified-java-classes.txt

Use for: Fuzzing URL parameters in web applications to test for deserialisation and type confusion vulnerabilities.