AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
Catch API bugs before your users do
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
Command line helpers for fuzzing
🐇 Fuzzing Rust code with American Fuzzy Lop
A toolset for reverse engineering and fuzzing Protobuf-based apps
A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential jailbreaks in their LLM APIs.
Security analysis toolkit for proprietary car protocols
Fuzzer for Linux Kernel Drivers
Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
- ipv6
- security-assessments
🔍A cutting edge context aware GraphQL API fuzzing tool!
Witcher is the first framework for using AFL to fuzz web applications.
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
The repository host gives no description.
GraphFuzz is an experimental framework for building structure-aware, library API fuzzers.
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
- automotive-security
- can-bus
- can-bus-hacking
- can-bus-security