fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
工具推荐:burpsuite,sqlmap,xssfork,Wfuzz,webdirscan
参数Fuzz字典
https://github.com/TheKingOfDuck/fuzzDicts/blob/master/paramDict/parameter.txt
采集自ThinkPHP
,yii2
,phphub
,Zblog
,DiscuzX
,WordPress
等常见PHP框架/CMS。
Xss Fuzz字典
https://github.com/TheKingOfDuck/easyXssPayload/blob/master/easyXssPayload.txt
采集自github
。
用户名字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/userNameDict
密码字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/passwordDict
目录字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/directoryDicts
SQL Fuzz字典
https://github.com/TheKingOfDuck/fuzzDicts/blob/master/sqlDict/sql.txt
ssrf fuzz字典
https://github.com/TheKingOfDuck/fuzzDicts/blob/master/ssrfDicts
由\xeb\xfe师傅提供。
XXE字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/XXEDicts
收集自百度。
ctf字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/ctfDict
收集自百度[侵删]。
Api字典
https://github.com/TheKingOfDuck/fuzzDicts/tree/master/apiDict/api.txt
钟馗采集的代码写得很cxk 我真弟弟。。。