gh0stkey/Web-Fuzzing-Box resource
Web Fuzzing Box - Web 模糊测试字典与一些Payloads observed · 2026-08-28
Health v2 · maintenance only
65/100
- Activity 73
- Release rhythm 35
- Longevity 100
Flags: no_releases no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 2070
- days_rel: n/a
- days_push: 163
- n_releases_24m: 0
Adoption not part of the score
2792 stars · 446 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A curated collection of web fuzzing dictionaries and payloads covering brute force, directory enumeration, and common web vulnerabilities like SQL injection, XSS, and JWT attacks. It is a static wordlist/payload repository intended for use with fuzzing tools such as BurpSuite.
Use cases
- find fuzzing wordlists for directory brute forcing
- get SQL injection and XSS payload dictionaries
- enumerate subdomains and passwords during pentests
- bypass 403 or auth checks with API bypass payloads
- load dictionaries into BurpSuite intruder
When to choose
- you need ready-made Chinese and English web fuzzing wordlists
- you are doing bug bounty or penetration testing and want curated payloads
When to avoid
- you need an automated fuzzing tool rather than dictionaries
- you require a licensed or formally maintained codebase
Facets
dataset · maturity active
penetration-testing fuzzing security security penetration-testing web-development cross-platform fuzzing-dictionaries wordlists payloads bugbounty pentesting
1 source
- readme: https://github.com/gh0stkey/Web-Fuzzing-Box · fetched 2026-08-28 · 55a184c72450
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| gh0stkey/Web-Fuzzing-Box | main | 65 |
For agents
markdown · JSON · MCP: product_card(name="gh0stkey/Web-Fuzzing-Box")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem