Fray

Fray is an open-source offensive security toolkit designed to streamline vulnerability testing and WAF security assessment. Moving beyond static payload collections, it provides a structured approach to detect WAF vendors, test against a comprehensive database of over 5,500 battle-tested payloads (including XSS, SQLi, SSRF, SSTI, and LLM jailbreaks), and generate professional HTML reports. Built for the AI era, Fray's structured JSON payloads are compatible with large language models like Claude Code and ChatGPT, further enhanced by an MCP server that allows AI assistants to directly call its functionalities for advanced workflows.

主要功能

使用案例