Repository Index

Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.

• ipv6
• security-assessments

Hydra: an Extensible Fuzzing Framework for Finding Semantic Bugs in File Systems

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

🤖 Repeat tests. Repeat tests. Repeat tests.

• testing
• test
• test-automation
• data-driven

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

Inferred Model-based Fuzzer

• fuzzer
• kernel-fuzzing
• macos

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

The repository host gives no description.

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

• fuzzing
• network
• ids
• firewall

An Android port of radamsa fuzzer

An Android port of the melkor ELF fuzzer

Artifact evaluation of paper: MorFuzz: Fuzzing Processor via Runtime Instruction Morphing enhanced Synchronizable Co-simulation

MINER provided by the paper "MINER: A Hybrid Data-Driven Approach for REST API Fuzzing"

Source code for ACTOR, an action-guided kernel fuzzer (USENIX 2023 paper)

A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process

A browser fuzzer augmented by API mod-ref relations

Source code release for the KRace project

A tool to enable fuzzing for Spectre vulnerabilities

Medusa Repository: Transynther tool and Medusa Attack

The repository host gives no description.

GraphFuzz is an experimental framework for building structure-aware, library API fuzzers.

Code for ASE'21 Paper "CorbFuzz: Checking Browser Security Policies with Fuzzing"

• fuzzing
• concolic-execution
• browser-security

Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.

• automotive-security
• can-bus
• can-bus-hacking
• can-bus-security