Wfuzz
GPL-2.0🕸 Web Scanning · Python
Wfuzz is a Python-based web application fuzzing tool used to brute force web parameters, directories, headers, and authentication credentials. It provides a flexible framework for security testing, allowing users to customize their attack vectors and payloads. Wfuzz is widely used for its ability to handle complex web application testing scenarios with ease and precision.
Installation
$ pip install wfuzzTags
Details
- Category
- 🕸 Web Scanning
- Language
- Python
- Repository
- xmendez/wfuzz
- License
- GPL-2.0
- Platforms
- 🐧linux🍎macos🪟windows
Links
Alternatives & Comparisons
More in Web Scanning
httpx
GoFast multi-purpose HTTP toolkit. Probes for running HTTP servers with retries and fallbacks.
Nikto
PerlClassic web server scanner. Tests for dangerous files, outdated server software, and version-specific problems.
Gobuster
GoDirectory/file, DNS, and vhost busting tool. Brute-forces URIs, DNS subdomains, virtual host names, and S3 buckets.
Feroxbuster
RustFast, recursive content discovery tool written in Rust. Like gobuster on steroids with auto-recursion.
Burp Suite Community
JavaWeb vulnerability scanner and proxy. Intercept, modify, and replay HTTP/S traffic for web app testing.
ffuf
GoFast web fuzzer written in Go. Fuzz anything - URLs, headers, POST data - with blazing speed.