#1Fuzz testing, mutation-based, generation-based, and coverage-guided fuzzing tools.
Kitploit recommended
portswigger/http-terminatorAI-assisted research pipeline that extracts HTTP desync techniques, generates malformed request test-cases, validates them via Burp, and confirms…
nicholasaleks/crackqlGraphQL penetration testing tool that exploits weak rate limits and cost analysis to brute-force credentials, bypass 2FA, enumerate users, and fuzz…
sysnets/atfuzzerGrammar-guided evolutionary fuzzer for dynamic analysis of AT command interfaces on Android smartphones via Bluetooth and USB, uncovering DoS,…
nmantani/fileinsight-pluginsFileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
thumpbo/cve-2025-30208-expCVE-2025-30208-EXP
efchatz/wpaxfuzzA full-featured open-source Wi-Fi fuzzer
cytopia/urlbusterPowerful mutable web directory fuzzer to bruteforce existing and/or hidden files or directories.
mindpatch/lorsrfFast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:
ioactive/platboxPlatform security assessment tool for dumping and analyzing UEFI/SMM registers, PCI config space, physical memory, SPI flash, and S3 bootscripts with…
s0duku/cve-2022-31705CVE-2022-31705 (Geekpwn 2022 Vmware EHCI OOB) POC
syss-research/wirebugWireBug is a toolset for Voice-over-IP penetration testing
ivan-sincek/forbiddenBypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.
niloofarkheirkhah/niliNili is a Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing.
anof-cyber/paraforgeA BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing
henshin/filebusterAn extremely fast and flexible web fuzzer
dmontgomery40/pentest-mcpNOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR,…
parikhakshat/autoharnessA tool that automatically creates fuzzing harnesses based on a library
jhftss/ida2objStatic binary instrumentation tool that dumps COFF object files from executables, enabling code/data insertion at any location for black-box fuzzing…
