Web Application
FuzzDB
Attack-payload and discovery wordlist library.
webwordlists
fuzzdb — terminal
$ ffuf -w fuzzdb/discovery/predictable.txt -u https://site/FUZZWhat it does
FuzzDB is a curated database of attack payloads, predictable resource names, and response-analysis regexes. It feeds fuzzers and manual testing rather than running on its own.
Common use cases
- •Provide high-quality wordlists for web content discovery during directory fuzzing.
- •Feed attack payloads into SQLMap, Commix, or fuzzing frameworks for injection testing.
- •Use response-analysis regex patterns to automatically identify vulnerable endpoints.
Key features
- •Curated collection of predictable filenames, paths, and backup-file patterns.
- •Includes SQL injection, XSS, and OS command-injection payload wordlists.
- •Provides regex patterns for automated response analysis and vulnerability detection.
- •Categorized by discovery, attacks, and responses for easy navigation.
Source
https://github.com/fuzzdb-project/fuzzdb ↗More Web Application tools
Need hosted scanning instead of local tooling?
Run a scan in the browser →