47,133 repositories indexed
1–24 of 27 · Most stars
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
Catch API bugs before your users do
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
DOM fuzzer
Automated testing to find logic and performance bugs in database systems
A friendly car security exploration tool for the CAN bus
Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
Security analysis toolkit for proprietary car protocols
Full-featured test framework for Go! Assertions, fuzzing, input testing, output capturing, and much more! 🍕
Owi: Seamless program analysis for C, C++, Go, Haskell, LLVM, Rust, Wasm and Zig.
FANS: Fuzzing Android Native System Services
Write unit and fuzz tests for Elm code.
Janus: a state-of-the-art file system fuzzer on Linux
Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
Hydra: an Extensible Fuzzing Framework for Finding Semantic Bugs in File Systems
🔍A cutting edge context aware GraphQL API fuzzing tool!
🤖 Repeat tests. Repeat tests. Repeat tests.
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
Witcher is the first framework for using AFL to fuzz web applications.
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
Artifact evaluation of paper: MorFuzz: Fuzzing Processor via Runtime Instruction Morphing enhanced Synchronizable Co-simulation
MINER provided by the paper "MINER: A Hybrid Data-Driven Approach for REST API Fuzzing"
A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process