REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Supporting your devops by shortening your strings using common abbreviations and clever guesswork

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

Accept URLs on stdin, replace all query string values with a user-supplied value

Gotator is a tool to generate DNS wordlists through permutations.

A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

Quickly generate context-specific wordlists for content discovery from lists of URLs or paths

tool for generating wordlists or extending an existing one using mutations.

Make URL path combinations using a wordlist

CeWL is a Custom Word List Generator

Burp extension to create target specific and tailored wordlist from burp history.

Fast and customizable subdomain wordlist generator using DSL

Afuzz is an automated web path fuzzing tool for the Bug Bounty projects.

Golang tool which helps dropping the irrelevant entries from your ffuf result file.

A path-normalization pentesting tool.

Dirscan是一款由go编写的高性能、高并发的目录扫描器，现在已经支持GET、HEAD、递归扫描、代理、爬虫等功能功能,后续努力实现更多功能。

Black box fuzzer for web applications

Wordlists handcrafted (and automated) with ♥

OSS-Fuzz - continuous fuzzing for open source software.

DOM fuzzer