content

參數(shù)Fuzz字典

Xss Fuzz字典

用戶名字典

密碼字典

目錄字典

sql-fuzz字典

ssrf-fuzz字典

XXE字典

ctf字典

Api字典

路由器后臺字典

文件后綴Fuzz

js文件字典

子域名字典

工具推薦：burpsuite,sqlmap,xssfork,Wfuzz,webdirscan

參數(shù)Fuzz字典

https://github.com/TheKingOfDuck/fuzzDicts/blob/master/paramDict/parameter.txt

采集自ThinkPHP,yii2,phphub,Zblog,DiscuzX,WordPress等常見PHP框架/CMS。

使用技巧：如http://127.0.0.1/1.php ,視為可疑文件，進(jìn)行fuzz param 選擇GET,POST AND (POST JSON) AND (GET Route) AND cookie param

Xss Fuzz字典

https://github.com/TheKingOfDuck/easyXssPayload/blob/master/easyXssPayload.txt

采集自github。

用戶名字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/userNameDict

密碼字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/passwordDict

目錄字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/directoryDicts

SQL Fuzz字典

https://github.com/TheKingOfDuck/fuzzDicts/blob/master/sqlDict/sql.txt

ssrf fuzz字典

https://github.com/TheKingOfDuck/fuzzDicts/blob/master/ssrfDicts

由\xeb\xfe師傅提供。

XXE字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/XXEDicts

收集自百度。

ctf字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/ctfDict

采集自kingkaki，原先收集時百度直接下載的壓縮包，沒看到github鏈接，所以沒標(biāo)記來源，抱歉抱歉

Api字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/apiDict/api.txt

鐘馗采集的代碼寫得很.....

路由器后臺字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/routerDicts/pass.txt

文件后綴Fuzz

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/uploadFileExtDicts

采集自https://github.com/c0ny1/upload-fuzz-dic-builder

js文件字典

采集自:https://github.com/7dog7/bottleneckOsmosis

項目地址：https://github.com/TheKingOfDuck/fuzzDicts