wireghoul/dotdotpwn

Health v2 · maintenance only

Adoption not part of the score

1114 stars · 186 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

DotDotPwn is a flexible directory traversal fuzzer written in Perl that discovers path traversal vulnerabilities in HTTP, FTP, and TFTP servers as well as web platforms like CMSs and ERPs. It includes a protocol-independent payload module and a STDOUT module for scripting use.

Use cases

• find directory traversal vulnerabilities in web servers
• fuzz FTP and TFTP servers for path traversal
• test CMS and ERP platforms for path traversal flaws
• send custom traversal payloads to arbitrary host and port
• script traversal fuzzing via STDOUT module
• penetration testing of web applications for OWASP path traversal

When to choose

• you need a dedicated, flexible directory/path traversal fuzzer
• you want protocol-independent payload fuzzing against custom services
• you work in penetration testing and want a tool included in Kali/BackTrack

When to avoid

• you need a general-purpose web vulnerability scanner rather than a traversal-specific fuzzer
• you require a maintained tool with frequent updates and modern dependencies
• your environment lacks Perl and its required modules

Facets

cli-tool · maturity maintenance

fuzzing penetration-testing security http-client security penetration-testing web-development windows cli directory-traversal path-traversal fuzzer perl owasp kali-linux linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="wireghoul/dotdotpwn")