Invicti-Security/brainstorm
A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
This tool helps web penetration testers and security researchers discover hidden directories, files, and endpoints in web applications. It takes a target website and an initial list of common web paths, then intelligently generates new, highly relevant paths using a local AI model. The output is a comprehensive list of all discovered web resources.
384 stars. No commits in the last 6 months.
Use this if you need to thoroughly explore a web application's hidden structure to uncover potential vulnerabilities or forgotten assets.
Not ideal if you are looking for a fully automated vulnerability scanner, as this tool focuses specifically on path discovery rather than exploit detection.
Stars
384
Forks
50
Language
Python
License
—
Category
Last pushed
Nov 26, 2024
Commits (30d)
0
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/llm-tools/Invicti-Security/brainstorm"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Higher-rated alternatives
google/oss-fuzz-gen
LLM powered fuzzing via OSS-Fuzz.
cyberark/FuzzyAI
A powerful tool for automated LLM fuzzing. It is designed to help developers and security...
prompt-security/ps-fuzz
Make your GenAI Apps Safe & Secure :rocket: Test & harden your system prompt
fuzz4all/fuzz4all
🌌️Fuzz4All: Universal Fuzzing with Large Language Models
ChatAFLndss/ChatAFL
Large Language Model guided Protocol Fuzzing (NDSS'24)