OSS-Fuzz - continuous fuzzing for open source software.
Repository Index
47,133 repositories indexed
1–24 of 45 · Most stars
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
- afl
- afl-fuzz
- afl-fuzzer
- fuzzing
syzkaller is an unsupervised coverage-guided kernel fuzzer
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
- messaging
- authentication
- key-management
- identity
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
An step by step fuzzing tutorial. A GitHub Security Lab initiative
Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
A fork and successor of the Sulley Fuzzing Framework
Bleeding edge django template focused on code quality and security.
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
Database anonymization and test data management
- golang
- obfuscation
- postgresql
- security
DOM fuzzer
A privacy-preserving Raspberry Pi home security camera that uses advanced end-to-end encryption.
- end-to-end-encryption
- home-security
- local-ai
- privacy
Asp.Net 7.0 & Angular 15 SPA Fullstack application with plenty of examples. Live demo:
- aspnetcore
- angular-cli
- efcore
- best-practices
A utility to safely generate malicious network traffic patterns and evaluate controls.
ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡
- ai
- autogen
- automation
- browser
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners