content

参数Fuzz字典

Xss Fuzz字典

用户名字典

密码字典

目录字典

sql-fuzz字典

ssrf-fuzz字典

XXE字典

ctf字典

Api字典

路由器后台字典

文件后缀Fuzz

js文件字典

子域名字典

工具推荐：burpsuite,sqlmap,xssfork,Wfuzz,webdirscan

参数Fuzz字典

https://github.com/TheKingOfDuck/fuzzDicts/blob/master/paramDict/parameter.txt

收罗自ThinkPHP,yii2,phphub,Zblog,DiscuzX,WordPress等常见PHP框架/CMS。。。。。。

使用技巧：如http://127.0.0.1/1.php ,视为可疑文件，，，，，，举行fuzz param 选择GET,POST AND (POST JSON) AND (GET Route) AND cookie param

Xss Fuzz字典

https://github.com/TheKingOfDuck/easyXssPayload/blob/master/easyXssPayload.txt

收罗自github。。。。。。

用户名字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/userNameDict

密码字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/passwordDict

目录字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/directoryDicts

SQL Fuzz字典

https://github.com/TheKingOfDuck/fuzzDicts/blob/master/sqlDict/sql.txt

ssrf fuzz字典

https://github.com/TheKingOfDuck/fuzzDicts/blob/master/ssrfDicts

由\xeb\xfe师傅提供。。。。。。

XXE字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/XXEDicts

网络自百度。。。。。。

ctf字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/ctfDict

收罗自kingkaki，，，，，，原先网络时百度直接下载的压缩包，，，，，，没看到github链接，，，，，，以是没标记泉源，，，，，，歉仄歉仄

Api字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/apiDict/api.txt

钟馗收罗的代码写得很.....

路由器后台字典

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/routerDicts/pass.txt

文件后缀Fuzz

https://github.com/TheKingOfDuck/fuzzDicts/tree/master/uploadFileExtDicts

收罗自https://github.com/c0ny1/upload-fuzz-dic-builder

js文件字典

收罗自:https://github.com/7dog7/bottleneckOsmosis

项目地点：https://github.com/TheKingOfDuck/fuzzDicts