Work · alternatives · 2026
24 alternatives to Pfuzz, a web fuzzer following the Unix philosophy
I recently dipped my toes into bug bounty hunting and finding security flaws in web applications. As a friend of UNIX shells I was building a repertoire of command line tools to make and analyze HTTP requests. Fortunately there are already many suitable tools like curl, jq, different fuzzers and some really nice tools for specific tasks by Tom Hudson [1]. However, I disliked that the existing fuzzers were monoliths where I had no easy way of creating custom behavior or analyses. They commonly do a multitude of things: Create multiple requests using one or more wordlist, sending the request,…
Pfuzz is a web fuzzer designed for security testing that follows Unix philosophy principles. It breaks down fuzzing into modular components that users can combine and customize using standard Unix tools and shell… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Pfuzz, a web fuzzer following the Unix philosophy launched in 2024; newer entries below may have overtaken it.
- 1
My little fuzzing framework inspired by grinder. Contribute to susperius/PyFuzz2 development by creating an account on GitHub.
2015 · github.com · its alternatives →
- 2
Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free! - matusf/openapi-fuzzer
2021 · github.com · its alternatives →
- 3
I wrote this tool during an internship at Narf Industries in 2023. It's a REPL that allows for quickly developing, testing, and fuzzing for HTTP request smuggling attack payloads. I started the internship having never worked with web servers, and have now found over 100 HTTP implementation bugs. I attribute this mostly to the ease of experimentation in the Garden. REPL-oriented fuzzing is just a really good interface for finding parsing bugs. It's pretty neat to able to run a differential fuzzer, categorize and display all the discovered discrepancies, then let a human pick through them and…
2024 · github.com · its alternatives →
- 4AW
Hey HN, I wanted to show you a product a small team and I have been working on for 4 years. https://jam.dev It’s called Jam and it prevents product managers (like I used to be) from being able to create vague and un-reproducible bug tickets (like I used to create). It’s actually really hard as a non-engineer to file useful bug tickets for engineers. Like, sometimes I thought I included a screenshot, but the important information the engineer needed was what was actually right outside the boundary of the screenshot I took. Or I'd write that something "didn't work" but the engineer…
2024 · its alternatives →
- 5
Or more precisely, my little site maker... It is a personal tool that I thoroughly enjoyed making, and enjoy using to write my website . A caveat before any more; nobody was supposed to promote this insanity. Like, terrible things have been done involving inotify and xdotool. But. It showed up on HN some months ago. That too while it was still, shall we say, fermenting. It got "done" some time thence, and of course one could not let the half-past just be. So here we are, for better or worse. Thank you HN mods for helping me repost! _\\// The README explains all, animated GIFs and…
2023 · github.com · its alternatives →
- 6
Hello HN! I became frustrated with the unpredictible/poor match quality and opaqueness of "relevance scores" in existing fuzzy and fulltext search libs, so I tried something different and this is the result. The main selling point is the result quality / ordering, with best-in-class memory overhead and excellent performance being bonuses. The API is pretty stable at this point, but looking for feedback before committing to 1.0. TL;DR The test corpus is a 4MB json file with 162k words/phrases, so give it a second for initial download. You can also drag/drop your own…
2022 · github.com · its alternatives →
- 7
interactive `git` with the help of `fzf`. Contribute to bigH/git-fuzzy development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 8
- 9
Snooper's charter fuzzer Chrome extension . Contribute to twak/hot-fuzz development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 10
Hi everyone, I recently published a small open-source project. It’s a minimal network packet analyzer written in Go — designed more like a learning toy than a replacement for Wireshark. It currently supports parsing basic protocols like TLS, DNS, and HTTP, and includes a tiny fuzzing engine to test payload responses. You can inspect raw packet content directly from the terminal. The output is colored for readability, and the code structure is kept simple and clear. The entire program is very small — just about 400 lines of Go code. I know it’s not anywhere near Wireshark’s level, and I still…
2025 · github.com · its alternatives →
- 11
shpool is a terminal session persistence tool developed internally at google to support remote workflows, which we have open sourced.
2024 · github.com · its alternatives →
- 12SA
Hello all :) I made this BBS for fun and thought you all would enjoy it. It's not perfect, but it's been a fun exercise! see it: https://asciinema.org/a/Emg6SWrXMV6cehfQxrw1GRu75 try it: ssh -p 2223 shhhbb.com host it: https://github.com/donuts-are-good/shhhbb/releases/latest why? Every year I challenge myself in some new way, this year it is to push one project per week. You might recognize my static site generator [0] or my releaser for go [1] from previous posts as one of these weekly projects. If you want to join me in doing this, it's…
2023 · donuts-are-good.github.io · its alternatives →
- 13
A probabilistic data structure service and storage - skizzehq/skizze
2016 · github.com · its alternatives →
- 14
Hurl, run and test HTTP requests with plain text and curl. Hurl can run fast automated integration tests.
2021 · hurl.dev · its alternatives →
- 15
Rapid fuzzy string matching in Python using various string metrics - rapidfuzz/RapidFuzz
2020 · github.com · its alternatives →
- 16
My simple Swiss Army knife for http/https troubleshooting and profiling. - trimstray/htrace.sh
2019 · github.com · its alternatives →
- 17
Funky takes shell functions to the next level by making them easier to define, more flexible, and more interactive. - bbugyi200/funky
2018 · github.com · its alternatives →
- 18
2025 · github.com · its alternatives →
- 19
A self-contained wifi sandbox for inspecting your own IoT devices - ABGEO/mezz
May 2026 · github.com · its alternatives →
- 20FA
2016 · mail.python.org · its alternatives →
- 21PC
2017 · enckse.github.io · its alternatives →
- 22PS
I started writing this mostly for the Pi but ended up building it to support multiple Linux OSs. It's intended to be just that, a small dashboard providing real-time details on the usage. Still a work in progress and was done for fun, there's a demo as well :). MIT license. https://pydash.net or http://k3oni.github.io/pydash
2014 · its alternatives →
- 23
Hi HN, I'm Tyler Flint. Eight months ago we shared qtap here (https://news.ycombinator.com/item?id=43928118). Today we're releasing DevTools - a browser-based interface that gives you the Chrome Network tab experience for server-side HTTP/S traffic. The problem: You're debugging a production issue. An external dependency is returning errors. Your logs say "request failed" but not what was actually sent. Adding debug logging means redeploying and restarting services - which takes time and often changes the conditions you're trying to debug. tcpdump shows encrypted blobs.…
Jan 2026 · qpoint.io · its alternatives →
- 24
Coverage-guided, in-process fuzzing for Node.js. Contribute to CodeIntelligenceTesting/jazzer.js development by creating an account on GitHub.
2022 · github.com · its alternatives →
Also compare
- PyFuzz2 – A little fuzzing framework in Python alternatives
- OpenAPI fuzzer – fuzzing APIs based on OpenAPI specification alternatives
- The HTTP Garden – A Parser Vulnerability Research Tool alternatives
- A web debugger an ex-Cloudflare team has been working on for 4 years alternatives
- Shite – little hot-reloadin' static site maker from shell alternatives
- uFuzzy.js – A tiny, efficient fuzzy search that doesn't suck alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →