Witcher

Web fuzzer

A framework for fuzzing web applications to detect vulnerabilities like command and SQL injection

Witcher is the first framework for using AFL to fuzz web applications.

GitHub

77 stars
23 watching
17 forks
Language: C
last commit: 12 months ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
shouc/corbfuzz Fuzz testing tool to check browser security policies and detect vulnerabilities in web applications 3
stephenfewer/grinder Automates fuzz testing of web browsers and manages crashes to help identify security vulnerabilities 415
andresriancho/websocket-fuzzer Automates the process of sending WebSocket messages to test application vulnerabilities 144
ameenmaali/qsfuzz A tool to help identify vulnerabilities in web applications by fuzzing query strings with custom rules. 296
henshin/filebuster A fast and flexible web application testing tool that uses brute-force methods to discover vulnerabilities 212
sycuricon/morfuzz A fuzzing framework for detecting functional bugs in RISC-V processors 23
google/fuzzbench Automated testing of software components to identify vulnerabilities and weaknesses 1,108
zigrin-security/cakefuzzer An automated tool designed to discover vulnerabilities in web applications by combining static and dynamic testing approaches. 96
jtpereyda/boofuzz A tool for generating and testing network protocol inputs to identify vulnerabilities 2,041
status-im/nim-drchaos A fuzzing framework for testing C/C++/Obj-C targets by generating random inputs to induce crashes or verify invariants. 68
forallsecure/graphfuzz A framework for building fuzzing tools to test C++ libraries' APIs by constructing and executing dataflow graphs of function calls and object dependencies. 9
rootup/bfuzz Automates browser testing with generated input payloads to identify vulnerabilities 309
s3team/squirrel A tool that generates random inputs to test the robustness of database management systems 185
momalab/icsfuzz Fuzzes control applications to uncover vulnerabilities 26
redteampentesting/monsoon A tool that sends HTTP requests in a fast and controlled manner to discover or test vulnerabilities in web applications. 460