Repository Index

Fast web fuzzer written in Go

• fuzzer
• pentesting
• infosec
• web

Web path scanner

• fuzzer
• fuzzing
• python
• security

AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

• afl
• afl-fuzz
• afl-fuzzer
• fuzzing

Web application fuzzer

syzkaller is an unsupervised coverage-guided kernel fuzzer

• linux
• kernel
• fuzz-testing
• fuzzing

An step by step fuzzing tutorial. A GitHub Security Lab initiative

• fuzzing
• security
• bug-hunting
• afl

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

• fuzzing
• security
• c

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration

DOM fuzzer

• fuzzing
• security
• dom

pure-python ECDSA signature/verification and ECDH key agreement

• python
• elliptic-curves
• cryptography
• digital-signatures

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

• fuzzing
• security
• fuzzer
• afl

Linux system call fuzzer

Fast HTTP enumerator

• http
• fuzz
• fuzzer
• enumerator

Fuzzer for Linux Kernel Drivers

• fuzzing
• kernel
• vulnerability-detection
• android

A Kernel fuzzer focusing on race bugs

Owi: Seamless program analysis for C, C++, Go, Haskell, LLVM, Rust, Wasm and Zig.

• ocaml
• wasm
• webassembly
• interpreter

Janus: a state-of-the-art file system fuzzer on Linux

• fuzzing
• fuzzer
• lkl
• filesystem

A coverage-guided REST API fuzzer developed on top of LibAFL

• api-fuzzer
• fuzzer
• fuzzing
• rest-api-test

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

• fuzzer
• fuzzing
• kernel-fuzzer
• windows-kernel

Inferred Model-based Fuzzer

• fuzzer
• kernel-fuzzing
• macos

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

A simple fuzzer for the MQTT protocol

An Android port of radamsa fuzzer