Initial public release

HTTP/AI adversarial fuzzer. Stripped finding database and internal
testing framework references. Configs sanitized.

configs/header_fuzz.yml

@@ -0,0 +1,16 @@
+# ── Fuzzer Config: Header value fuzzing ───────────────────
+
+name: "Header Fuzz"
+
+request:
+  url: "https://example.com/api/resource"
+  method: GET
+  headers:
+    User-Agent: "{{FUZZ}}"
+    # Authorization: "Bearer {{TOKEN}}"
+  fuzz_encoding: none
+
+settings:
+  skip_tls_verify: false
+  timeout: 30
+  delay: 0

configs/oauth2.yml

@@ -0,0 +1,33 @@
+# ── Fuzzer Config: OAuth2 client credentials -> API endpoint ──────────────
+#
+#  Placeholders:
+#    {{FUZZ}}   — replaced with each payload from your wordlist
+#    {{AUTH}}   — bearer token (auto-filled after auth step)
+#    {{KEY}}    — any key from your vars file ({{TOKEN}}, {{USERNAME}}, etc.)
+
+name: "OAuth2 API Fuzz"
+
+auth:
+  url: "https://auth.example.com/oauth2/token"
+  # method: POST                                       # default
+  # headers:
+  #   Authorization: "Basic {{CLIENT_CREDS}}"
+  #   Content-Type: "application/x-www-form-urlencoded"
+  # body: "grant_type=client_credentials"              # default
+  token_field: "access_token"
+  cache: 280
+
+request:
+  url: "https://api.example.com/v1/query"
+  method: POST
+  headers:
+    Authorization: "Bearer {{AUTH}}"
+    Content-Type: "application/json"
+  body: '{"prompt": "{{FUZZ}}"}'
+  fuzz_encoding: json
+
+settings:
+  skip_tls_verify: false
+  timeout: 30
+  delay: 0
+  # proxy: "http://127.0.0.1:8080"

configs/session_auth.yml

@@ -0,0 +1,26 @@
+# ── Fuzzer Config: Session/cookie auth ────────────────────
+
+name: "Session Auth Fuzz"
+
+auth:
+  url: "https://example.com/api/login"
+  method: POST
+  headers:
+    Content-Type: "application/json"
+  body: '{"username": "{{USERNAME}}", "password": "{{PASS}}"}'
+  token_field: "session_token"
+  cache: 600
+
+request:
+  url: "https://example.com/api/search"
+  method: POST
+  headers:
+    Authorization: "Bearer {{AUTH}}"
+    Content-Type: "application/json"
+  body: '{"q": "{{FUZZ}}"}'
+  fuzz_encoding: json
+
+settings:
+  skip_tls_verify: false
+  timeout: 30
+  delay: 0.5

configs/simple_post.yml

@@ -0,0 +1,17 @@
+# ── Fuzzer Config: Simple POST fuzzing (no auth) ─────────
+
+name: "Simple POST Fuzz"
+
+request:
+  url: "https://example.com/api/endpoint"
+  method: POST
+  headers:
+    Content-Type: "application/json"
+    # X-API-Key: "{{API_KEY}}"
+  body: '{"query": "{{FUZZ}}"}'
+  fuzz_encoding: json
+
+settings:
+  skip_tls_verify: false
+  timeout: 30
+  delay: 0