Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload.

HackTricks wiki

Wordlists

Tool to bypass Webs

fuzzhttpbypass