Repository Index

Most advanced XSS scanner.

• xss
• xss-scanner
• xss-exploit
• xss-bruteforce

Monkey testing library for web apps and Node.js

• test
• fuzz-testing
• frontend

AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

• afl
• afl-fuzz
• afl-fuzzer
• fuzzing

syzkaller is an unsupervised coverage-guided kernel fuzzer

• linux
• kernel
• fuzz-testing
• fuzzing

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

• fuzzing
• security
• c

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

• afl
• afl-fuzz
• aflplusplus
• fuzzing

Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels

• fuzzing
• kernel
• intel-pt
• processor-trace

Fuzzer for Linux Kernel Drivers

• fuzzing
• kernel
• vulnerability-detection
• android

Set of tools for security testing of Internet of Things devices using specific network IoT protocols

Owi: Seamless program analysis for C, C++, Go, Haskell, LLVM, Rust, Wasm and Zig.

• ocaml
• wasm
• webassembly
• interpreter

A generic fuzzing and delta-debugging framework

Write unit and fuzz tests for Elm code.

A coverage-guided REST API fuzzer developed on top of LibAFL

• api-fuzzer
• fuzzer
• fuzzing
• rest-api-test

Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.

• ipv6
• security-assessments

🤖 Repeat tests. Repeat tests. Repeat tests.

• testing
• test
• test-automation
• data-driven

Inferred Model-based Fuzzer

• fuzzer
• kernel-fuzzing
• macos

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

• fuzzing
• network
• ids
• firewall

MINER provided by the paper "MINER: A Hybrid Data-Driven Approach for REST API Fuzzing"

Source code for ACTOR, an action-guided kernel fuzzer (USENIX 2023 paper)

A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process

Source code release for the KRace project

Code for ASE'21 Paper "CorbFuzz: Checking Browser Security Policies with Fuzzing"

• fuzzing
• concolic-execution
• browser-security