235
GitHub - TheKingOfDuck/fuzzDicts: Web Pentesting Fuzz 字典,一个就够了。
source link: https://github.com/TheKingOfDuck/fuzzDicts
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
README.md
fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
工具推荐：burpsuite,sqlmap,xssfork,Wfuzz,webdirscan
参数Fuzz字典
https://github.com/TheKingOfDuck/fuzzDicts/blob/master/paramDict/parameter.txt
采集自ThinkPHP,yii2,phphub,Zblog,DiscuzX,WordPress等常见PHP框架/CMS。
Xss Fuzz字典
https://github.com/TheKingOfDuck/easyXssPayload/blob/master/easyXssPayload.txt
采集自github。
用户名字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/userNameDict
密码字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/passwordDict
目录字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/directoryDicts
SQL Fuzz字典
https://github.com/TheKingOfDuck/fuzzDicts/blob/master/sqlDict/sql.txt
ssrf fuzz字典
https://github.com/TheKingOfDuck/fuzzDicts/blob/master/ssrfDicts
由\xeb\xfe师傅提供。
XXE字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/XXEDicts
收集自百度。
ctf字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/ctfDict
收集自百度[侵删]。
Api字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/apiDict/api.txt
钟馗采集的代码写得很cxk 我真弟弟。。。
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK