ItsIgnacioPortal / SecLists-Express

SecLists-Express is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project
MIT License
2 stars 0 forks source link

feat(wordlist): Added 'fully-qualified-java-classes' to fuzzing lists #11

Closed ItsIgnacioPortal closed 1 month ago

ItsIgnacioPortal commented 1 month ago

A list of fully-qualified Java classes is useful for fuzzing Java applications.

For example, some applications accept these class names as parameters in an HTTP request. The list may help discover deserialisation, type confusion or other bugs related to the processing of these Java object types.