AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
syzkaller is an unsupervised coverage-guided kernel fuzzer
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
DOM fuzzer
Automated testing to find logic and performance bugs in database systems
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
Security analysis toolkit for proprietary car protocols
Full-featured test framework for Go! Assertions, fuzzing, input testing, output capturing, and much more! 🍕
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
A coverage-guided REST API fuzzer developed on top of LibAFL
- api-fuzzer
- fuzzer
- fuzzing
- rest-api-test
🔍A cutting edge context aware GraphQL API fuzzing tool!
🤖 Repeat tests. Repeat tests. Repeat tests.
Witcher is the first framework for using AFL to fuzz web applications.
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
A simple fuzzer for the MQTT protocol
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
Source code for ACTOR, an action-guided kernel fuzzer (USENIX 2023 paper)
A tool to enable fuzzing for Spectre vulnerabilities
A blockchain consensus protocol fuzzing framework
Medusa Repository: Transynther tool and Medusa Attack