Initial public release

HTTP/AI adversarial fuzzer. Stripped finding database and internal
testing framework references. Configs sanitized.

configs/session_auth.yml

@@ -0,0 +1,26 @@
+# ── Fuzzer Config: Session/cookie auth ────────────────────
+
+name: "Session Auth Fuzz"
+
+auth:
+  url: "https://example.com/api/login"
+  method: POST
+  headers:
+    Content-Type: "application/json"
+  body: '{"username": "{{USERNAME}}", "password": "{{PASS}}"}'
+  token_field: "session_token"
+  cache: 600
+
+request:
+  url: "https://example.com/api/search"
+  method: POST
+  headers:
+    Authorization: "Bearer {{AUTH}}"
+    Content-Type: "application/json"
+  body: '{"q": "{{FUZZ}}"}'
+  fuzz_encoding: json
+
+settings:
+  skip_tls_verify: false
+  timeout: 30
+  delay: 0.5