gh0stkey/Web-Fuzzing-Box

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

You Know, For WEB Fuzzing !

Rockyou for web fuzzing

实战沉淀字典

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A curated list of wordlists for bruteforcing and fuzzing

Real-world infosec wordlists, updated regularly