OSS-Fuzz - continuous fuzzing for open source software.
Repository Index
47,133 repositories indexed
1–24 of 32 · Most stars
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
- afl
- afl-fuzz
- afl-fuzzer
- fuzzing
syzkaller is an unsupervised coverage-guided kernel fuzzer
Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
A fork and successor of the Sulley Fuzzing Framework
Bleeding edge django template focused on code quality and security.
Database anonymization and test data management
- golang
- obfuscation
- postgresql
- security
DOM fuzzer
Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡
- ai
- autogen
- automation
- browser
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
Security analysis toolkit for proprietary car protocols
- carhacking
- automotive-security
- reverse-engineering
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE
- awesome-lists
- voip-security
- hacking-voip
- sip-security
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
:computer:⚔️ A collection of awesome penetration testing resources, tools, and other shiny things.
🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.
- active-directory
- ai-security-tool
- privilege-escalation
- red-team
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing