Repository Index

OSS-Fuzz - continuous fuzzing for open source software.

• fuzzing
• security
• stability
• oss-fuzz

AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

• afl
• afl-fuzz
• afl-fuzzer
• fuzzing

syzkaller is an unsupervised coverage-guided kernel fuzzer

• linux
• kernel
• fuzz-testing
• fuzzing

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

• fuzzing
• security
• c

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

A fork and successor of the Sulley Fuzzing Framework

• fuzzing
• python
• security

DOM fuzzer

• fuzzing
• security
• dom

A friendly car security exploration tool for the CAN bus

• python
• can-bus
• security-scanner
• security-testing

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

• fuzzing
• security
• fuzzer
• afl

Security analysis toolkit for proprietary car protocols

• carhacking
• automotive-security
• reverse-engineering

Full-featured test framework for Go! Assertions, fuzzing, input testing, output capturing, and much more! 🍕

• testing
• testing-framework
• go
• golang

Set of tools for security testing of Internet of Things devices using specific network IoT protocols

Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.

• ipv6
• security-assessments

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

Artifact evaluation of paper: MorFuzz: Fuzzing Processor via Runtime Instruction Morphing enhanced Synchronizable Co-simulation