qsfuzz

Fuzzer

A tool to help identify vulnerabilities in web applications by fuzzing query strings with custom rules.

qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

GitHub

297 stars
8 watching
36 forks
Language: Go
last commit: over 3 years ago
Linked from 1 awesome list

bugbountyfuzzinfosecsecurityvulnerability-detection

Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
momalab/icsfuzzA tool used to test security vulnerabilities in industrial control systems by injecting random data into their application code.26
devanshbatham/openredirexA tool for detecting open redirect vulnerabilities in web applications by modifying URLs and attempting to fetch them.718
redteampentesting/monsoonA tool that sends HTTP requests in a fast and controlled manner to discover or test vulnerabilities in web applications.464
henshin/filebusterA fast and flexible web application testing tool that uses brute-force methods to discover vulnerabilities213
stephenfewer/grinderAutomates fuzz testing of web browsers and manages crashes to help identify security vulnerabilities416
jtpereyda/boofuzzA tool for generating and testing network protocol inputs to identify vulnerabilities2,057
rootup/bfuzzAutomates browser testing with generated input payloads to identify vulnerabilities309
danmcinerney/fuzzstringsA collection of pre-defined strings to test web application vulnerabilities32
sefcom/witcherA framework for fuzzing web applications to detect vulnerabilities like command and SQL injection78
andresriancho/websocket-fuzzerAutomates the process of sending WebSocket messages to test application vulnerabilities144
withsecureopensource/mqtt_fuzzA tool to test and identify vulnerabilities in MQTT protocol implementations by sending pre-defined sequences of control packets.77
fuzzinglabs/cairo-fuzzerA tool for testing smart contract security by generating random inputs and executing them on a contract to identify vulnerabilities.120
google/fuzzbenchAutomated testing of software components to identify vulnerabilities and weaknesses1,110
googleprojectzero/fuzzilliAutomates the process of finding bugs in JavaScript engines by generating random code and testing it for errors1,896
chijinz/minervaA tool that generates realistic browser API invocations by analyzing memory-level mod-ref relations and applying weighted selection during test case generation.31