# Web-Fuzzing-Box
Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...
字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1
```shell
❯ tree -L 2
.
├── Brute [爆破]
│ ├── Abroad [国外字典]
│ ├── Application [服务、应用字典]
│ ├── Basic_401_Login.txt [401认证字典]
│ ├── Chinese [适用于中国的字典]
│ ├── Password [密码字典]
│ ├── Ports [端口字典]
│ ├── Security_Product [安全产品]
│ ├── Subdomain [子域名]
│ ├── Top_Password [Top排名字典]
│ └── Username [用户名字典]
├── Dir [目录、文件名、接口]
│ ├── Api.txt [接口字典]
│ ├── Burpsuite [适用于BurpSuite的字典，源于：https://gh0st.cn//archives/2020-02-13/1]
│ ├── Ctf.txt [适用于CTF比赛的字典]
│ ├── Directories.txt [目录字典]
│ ├── Jsp_Jspa_Do_Action.txt [Jsp、Jspa、Do、Action后缀文件名字典]
│ ├── Wooyun [乌云历史漏洞目录、文件字典]
│ └── Yujian [中国御剑字典]
├── Vuln [漏洞相关字典]
│ ├── Api [Api漏洞：绕过403、鉴权绕过]
│ ├── File_Upload [文件上传漏洞]
│ ├── File_Include [文件包含字典]
│ ├── Image_Dos [图片资源导致的DoS拒绝服务漏洞字典]
│ ├── Jsonp [JSONP跨域劫持漏洞字典]
│ ├── Open_Redirect [URL跳转漏洞字典]
│ ├── Sql_Injection [SQL注入字典]
│ ├── Traversal_Directory [遍历目录漏洞字典]
│ ├── Xml_Bomb [XML炸弹Payloads]
│ └── Xss [XSS字典与Payloads]
└── Web [Web测试字典]
├── File_Path [一些文件及路径]
├── Funcation_Name.txt [函数名]
├── HTML [HTML相关]
├── Headers [HTTP头]
├── Http_Methods.txt [HTTP请求方式]
├── Integer_Overflows.txt [整数溢出]
├── Javascript_Filename.txt [JavaScript文件名]
├── Lcoalhost.txt [本地地址]
├── Parameters [请求参数]
├── URL [URL相关协议和类型]
└── ViewState_Key.txt [用于ViewState反序列化]
```
## 致谢
[远海](https://github.com/yuanhaiGreg): 贡献文件上传参数、ViewState_Key
Web-Fuzzing-Box-main各种字典
需积分: 0 155 浏览量
2023-04-13
17:57:00
上传
评论
收藏 26.4MB 7Z 举报
Web-Fuzzing-Box-main各种字典 （190个子文件） 
.gitignore 10B
Xml_Xss_Cheatsheet.html 92KB Jupyternotebookxss.ipynb 611B README.md 2KB
Xss_Comment_Exif_Metadata_Double_Quote.png 12KB Xss_Comment_Exif_Metadata_Single_Quote.png 12KB
Svg_Xss.svg 379B Svg_Xss2.svg 80B Svg_Xss3.svg 64B Svg_Xss1.svg 62B
Insecureflashfile.swf 5KB Xsstest.swf 981B
314W_Subdomains.txt 32.7MB Directories.txt 30.13MB 268W_Subdomains.txt 19.47MB 92W_Name_Pinyin.txt 9.68MB Dir.txt 5.63MB Asp.txt 4.31MB 20W_Subdomains.txt 1.88MB Crackdict.txt 1.87MB Dotdotpwn.txt 1.79MB English_Length08.txt 1.28MB Backup.txt 1.13MB English_Length07.txt 1.06MB Common_Password.txt 1023KB English_Length09.txt 1015KB Top10W.txt 907KB English_Length06.txt 886KB Simple_Subdomains.txt 880KB English_Length10.txt 865KB Top100000.txt 821KB Php.txt 756KB Dir.txt 704KB 7W_Parameters.txt 664KB Aspx.txt 621KB English_Length05.txt 570KB Internet_Hosts.txt 394KB All_Upload_Fuzz.txt 386KB Win_Upload_Fuzz.txt 386KB Apache_Upload_Fuzz.txt 385KB Iis_Upload_Fuzz.txt 383KB Tomcat_Upload_Fuzz.txt 380KB Films.txt 327KB English_Length04.txt 309KB Jsp.txt 282KB Php.txt 270KB Aspx.txt 264KB English_Common.txt 226KB Jsp.txt 201KB Mdb.txt 168KB Asp.txt 167KB Webshell.txt 140KB Jsp_Upload_Fuzz.txt 133KB Action.txt 131KB Php_Upload_Fuzz.txt 128KB Asp_Upload_Fuzz.txt 126KB Bible.txt 116KB Places.txt 115KB Easyxsspayload.txt 111KB English_Length03.txt 104KB Bacteria.txt 87KB Top10000.txt 82KB Traversals_8_Deep_Exotic_Encoding.txt 68KB Deep_Traversal.txt 67KB Centos.txt 47KB Javascript_Filename.txt 40KB Wifi_Password_Top2000.txt 34KB Asteroids.txt 32KB Python.txt 32KB Lfi.txt 27KB Funcation_Name.txt 23KB Koran.txt 21KB HTTP_Headers.txt 17KB Top500_Name_Pinyin_Group.txt 17KB Top1000.txt 16KB Username.txt 16KB Username.txt 16KB Username.txt 16KB Basic_401_Login.txt 15KB Aix.txt 15KB 国内外设备默认口令整理.txt 12KB Common_Name_Pinyin_Group.txt 10KB Common.txt 9KB Chinese_Hacker_Id.txt 8KB Directory_Traversal.txt 8KB File_Extensions.txt 7KB Api.txt 6KB Wooyun_Bug_Ports.txt 5KB Nmap_Top1000_UDP_Ports.txt 5KB Location.txt 5KB Nmap_Top1000_TCP_Ports.txt 5KB Startrek.txt 5KB Top500_Chinese_Simplified_Name.txt 4KB Linux_Upload_Fuzz.txt 4KB Top500_Name_Pinyin.txt 4KB Markdown_Xss_Payload.txt 4KB Top500_Username.txt 4KB Tolkien.txt 4KB Test_Chinese_Mobilephonenumber.txt 4KB Linux_File.txt 4KB共 190 条
- 1
- 2
资源评论
