topic: fuzzing web apps where can i find good video tutorials,articles,documentation,manuals,etc about fuzzing web apps? any software you recommend? any good resource? Thanks in advance
https://www.powerfuzzer.com/ https://pentest-tools.com/website-vulnerability-scanning/discover-hidden-directories-and-files actually, all links u can harvest by "web fuzzer", "pen tests", "distro forensics". the best search engine for recent times been duckduckgo.com == it doesn't cut "illegal" links + works just fine through tor. however, they steadily has traced their users.. so, for very security reasons, use tor + keep JavaScript off.
SecLists Collection of list include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. https://github.com/danielmiessler/SecLists PayloadsAllTheThings A list of useful payloads and bypass for Web Application Security and Pentest/CTF https://github.com/swisskyrepo/PayloadsAllTheThings which list contain the best fuzzing payloads? Thanks