VulnScanners Logo

Web Application

FuzzDB

Attack-payload and discovery wordlist library.

webwordlists
fuzzdb — terminal
$ ffuf -w fuzzdb/discovery/predictable.txt -u https://site/FUZZ

What it does

FuzzDB is a curated database of attack payloads, predictable resource names, and response-analysis regexes. It feeds fuzzers and manual testing rather than running on its own.

Common use cases

  • Provide high-quality wordlists for web content discovery during directory fuzzing.
  • Feed attack payloads into SQLMap, Commix, or fuzzing frameworks for injection testing.
  • Use response-analysis regex patterns to automatically identify vulnerable endpoints.

Key features

  • Curated collection of predictable filenames, paths, and backup-file patterns.
  • Includes SQL injection, XSS, and OS command-injection payload wordlists.
  • Provides regex patterns for automated response analysis and vulnerability detection.
  • Categorized by discovery, attacks, and responses for easy navigation.

Source

https://github.com/fuzzdb-project/fuzzdb

More Web Application tools

Need hosted scanning instead of local tooling?

Run a scan in the browser →