1.渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目
https://github.com/insightglacier/Dictionary-Of-Pentesting Dictionary-Of-Pentesting
Fuzz 字典,一个就够了
2.https://github.com/TheKingOfDuck/fuzzDicts Web Pentesting
3.Web 模糊测试字典与一些Payloads
https://github.com/gh0stkey/Web-Fuzzing-Box Web Fuzzing Box
4.上传漏洞fuzz字典生成脚本
https://github.com/c0ny1/upload-fuzz-dic-builder upload-fuzz-dic-builder
5.安全评估期间使用的多种类型列表的集合
https://github.com/danielmiessler/SecLists SecLists
6.渗透测试仪和Bug赏金猎人的 Payload 库
https://github.com/sh377c0d3/Payloads Payloads
7.基于实战沉淀下的各种弱口令字典
https://github.com/fuzz-security/SuperWordlist SuperWordlist
8.各类漏洞的 TOP25 参数字典
https://github.com/lutfumertceylan/top25-parameter top25-parameter
9.提取收集以往泄露的密码中符合条件的强弱密码
https://github.com/r35tart/RW_Password RW_Password
|