Witcher
A framework for using AFL to fuzz web applications and detect SQL/command injection vulnerabilities.
What is Witcher?
Witcher is a framework for fuzzing web applications using AFL (American Fuzzy Lop) to detect security vulnerabilities like SQL injection and command injection. It applies mutational fuzzing and fault escalation techniques to explore web applications and identify flaws that could be exploited by attackers. The tool is designed to bring coverage-guided fuzzing, commonly used for binary programs, to the web application domain.
Security researchers, penetration testers, and developers focused on web application security who need to identify injection vulnerabilities in PHP, Python, Java, Node.js, or Ruby applications.
Developers choose Witcher because it extends AFL's proven fuzzing capabilities to web applications, providing a specialized, open-source solution for detecting SQL and command injection vulnerabilities through grey-box coverage-guided mutational fuzzing.
Overview
Witcher is the first framework for using AFL to fuzz web applications.
Use Cases
Best For
- Detecting SQL injection vulnerabilities in web applications
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.