Wfuzz

Spec sheet

Purpose

Wfuzz is a framework for automating web application security assessments and finding and exploiting web application vulnerabilities.Read 7 Oct 2026 · wfuzz.readthedocs.io

Audience

The README describes Wfuzz as a tool for people performing web application assessments and pentesting.Read 7 Oct 2026 · github.com

Support

The project links to documentation and uses GitHub issues and pull requests for project activity.Read 7 Oct 2026 · github.com

License

The GitHub repository identifies the project as licensed under GPL-2.0.Read 7 Oct 2026 · github.com

Burp support

Wfuzz can expose a language interface to prior requests and responses made with Wfuzz or tools such as Burp for manual and semi-automatic testing.Read 7 Oct 2026 · github.com

Fuzzing

It replaces FUZZ markers in HTTP requests with values from payloads, allowing inputs to be tested in request parameters, authentication, forms, directories, files, and headers.Read 7 Oct 2026 · github.com

Installation

The project README gives pip installation and a Docker image command as installation options.Read 7 Oct 2026 · github.com

Other tools

The framework includes wfpayload for generating payloads and wfencode for encoding and decoding.Read 7 Oct 2026 · wfuzz.readthedocs.io

Payloads and filters

The documentation describes multiple payloads, combining payloads, encoders, and filters for selecting or hiding responses.Read 7 Oct 2026 · wfuzz.readthedocs.io

Plugins

Its vulnerability scanner is supported by plugins, and the framework is modular so users can build plugins.Read 7 Oct 2026 · github.com

Release

The GitHub releases page lists Wfuzz 3.1.1 as the latest release.Read 7 Oct 2026 · github.com

Request coverage

The documentation describes fuzzing paths and files, URL parameters, POST requests, cookies, custom headers, and HTTP verbs.Read 7 Oct 2026 · wfuzz.readthedocs.io

Plans and prices

Every Wfuzz plan and price →

Where Specifiction places it

• Fuzz Testing Software#20 of 267.3