Library
- Trickest Library
- Modules
- Attack Surface Management
- Cloud Storage
- Containers
- Content Discovery
- Discovery
- Fuzzing
- Machine Learning
- Misconfiguration
- Network
- OSINT
- Passwords
- Recon
- Scanners
- Secret Discovery
- Social Engineering
- Static Code Analysis
- Threat Intelligence
- Utilities
- Vulnerabilities
- Vulnerability Scanning
Fuzzing Tools
Explore a collection of powerful and efficient tools in the Fuzzing category to enhance your productivity and security.
crithit
Website Directory and file brute forcing at extreme scale. CritHit takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next wordlist item. The intention of brute foricng in this manner is to avoid low limit Web Application Firewall (WAF) bans and to allow brute forcing to run faster than it normally would when approaching any single host with multiple simultaneous requests.
ffuf
A fast web fuzzer written in Go.
ffuf-multi
A fast web fuzzer written in Go.
ffuf-multi-od
A fast web fuzzer written in Go.
ffuf-od
A fast web fuzzer written in Go.
ffuf-virtual-hosts
A fast web fuzzer written in Go, packaged for virtual host discovery
medusa
Fastest recursive HTTP fuzzer, like a Ferrari. Known issues socket: too many open file The solution to this is to increase ulimit, you can solve this problem by typing ulimit -n 8129 before running Medusa.
paramspider
Finds parameters from web archives of the entered domain. Finds parameters from subdomains as well. Gives support to exclude urls with specific extensions. It mines the parameters from web archives (without interacting with the target host).
shortscan
An IIS short filename enumeration tool
wfuzz
Wfuzz can be used to look for hidden content, such as files and directories, within a web server, allowing to find further attack vectors. It is worth noting that, the success of this task depends highly on the dictionaries used.
x8
The tool helps to find hidden parameters that can be vulnerable or can reveal interesting functionality that other hunters miss. Greater accuracy is achieved thanks to the line-by-line comparison of pages, comparison of response code and reflections.