dwisiswant0/crlfuzz

Health v2 · maintenance only

Adoption not part of the score

1560 stars · 145 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CRLFuzz is a fast command-line tool written in Go that scans websites for CRLF (carriage return/line feed) injection vulnerabilities. It supports single URLs, URL lists, stdin input, custom methods, headers, proxies, and concurrency.

Use cases

• scan a website for CRLF injection vulnerabilities
• fuzz a list of URLs for CRLF issues
• check if a target is vulnerable to HTTP response splitting
• bulk scan URLs from stdin during recon
• test CRLF injection through a proxy like Burp

When to choose

• you need a fast, single-purpose CRLF vulnerability scanner
• you want a Go-based CLI that fits into automated recon pipelines
• you need stdin/list-based bulk scanning with concurrency

When to avoid

• you need a general-purpose web vulnerability scanner covering many vulnerability classes
• you need a GUI-based scanning tool
• you need authenticated, session-aware deep crawling

Facets

cli-tool · maturity active

vulnerability-scanning http-client security security penetration-testing web-development windows cli cross-platform crlf-injection vulnerability-scanner go web-security fuzzing command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dwisiswant0/crlfuzz")