The Top 151 Fuzzing Open Source Projects

Awesome Open Source

Awesome Open Source

Combined Topics

Advertising 📦 10

Application Programming Interfaces 📦 124

Applications 📦 192

Artificial Intelligence 📦 78

Blockchain 📦 73

Build Tools 📦 113

Cloud Computing 📦 80

Code Quality 📦 28

Collaboration 📦 32

Command Line Interface 📦 49

Community 📦 83

Companies 📦 60

Compilers 📦 63

Computer Science 📦 80

Configuration Management 📦 42

Content Management 📦 175

Control Flow 📦 213

Data Formats 📦 78

Data Processing 📦 276

Data Storage 📦 135

Economics 📦 64

Frameworks 📦 215

Graphics 📦 110

Hardware 📦 152

Integrated Development Environments 📦 49

Learning Resources 📦 166

Libraries 📦 129

Lists Of Projects 📦 22

Machine Learning 📦 347

Mapping 📦 64

Marketing 📦 15

Mathematics 📦 55

Messaging 📦 98

Networking 📦 315

Operating Systems 📦 89

Operations 📦 121

Package Managers 📦 55

Programming Languages 📦 245

Runtime Environments 📦 100

Science 📦 42

Security 📦 396

Social Media 📦 27

Software Architecture 📦 72

Software Development 📦 72

Software Performance 📦 58

Software Quality 📦 133

Text Editors 📦 49

Text Processing 📦 136

User Interface 📦 330

User Interface Components 📦 514

Version Control 📦 30

Virtualization 📦 71

Web Browsers 📦 42

Web Servers 📦 26

Web User Interface 📦 210

The Top 151 Fuzzing Open Source Projects

Categories > Software Quality > Fuzzing

Awesome Hacking ⭐ 45,193

A collection of various awesome lists for hackers, pentesters and security researchers

Oss Fuzz ⭐ 6,515

OSS-Fuzz - continuous fuzzing for open source software.

Dirsearch ⭐ 6,473

Web path scanner

Hypothesis ⭐ 5,322

Hypothesis is a powerful, flexible, and easy to use library for property-based testing.

the champagne of beta embedded databases

Clusterfuzz ⭐ 4,537

Scalable fuzzing infrastructure.

Go Fuzz ⭐ 4,092

Randomized testing for Go

Awesome Fuzzing ⭐ 3,702

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

Syzkaller ⭐ 3,616

syzkaller is an unsupervised coverage-guided kernel fuzzer

Fuzzdicts ⭐ 3,502

Web Pentesting Fuzz 字典,一个就够了。

Dnstwist ⭐ 2,940

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Intruderpayloads ⭐ 2,638

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Honggfuzz ⭐ 2,291

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

Fast Check ⭐ 2,263

Property based testing framework for JavaScript (like QuickCheck) written in TypeScript

Raccoon ⭐ 2,182

A high performance offensive security tool for reconnaissance and vulnerability scanning

Aflplusplus ⭐ 1,936

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

Winafl ⭐ 1,727

A fork of AFL for fuzzing Windows binaries

Hackvault ⭐ 1,440

A container repository for my public web hacks!

Reconftw ⭐ 1,424

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Domato ⭐ 1,342

Testing Distributed Systems ⭐ 1,311

Curated list of resources on testing distributed systems

Boofuzz ⭐ 1,265

A fork and successor of the Sulley Fuzzing Framework

Rfsec Toolkit ⭐ 1,118

RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集，可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith

Burpsuite Collections ⭐ 1,081

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

Afl.rs ⭐ 1,059

🐇 Fuzzing Rust code with American Fuzzy Lop

Packer Fuzzer ⭐ 948

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

Paramspider ⭐ 935

Mining parameters from dark corners of Web Archives

Fuzzingpaper ⭐ 914

Recent Fuzzing Paper

A toolset for reverse engineering and fuzzing Protobuf-based apps

Afl Training ⭐ 786

Exercises to learn how to fuzz with American Fuzzy Lop

Halfempty ⭐ 775

A fast, parallel test case minimization tool.

Cargo Fuzz ⭐ 770

Command line helpers for fuzzing

Paper_collection ⭐ 768

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

Sqlancer ⭐ 744

Detecting Logic Bugs in DBMS

Dictionary Of Pentesting ⭐ 718

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

Awesome Vulnerability Research ⭐ 694

🦄 A curated list of the awesome resources about the Vulnerability Research

Crosshair ⭐ 676

An analysis tool for Python that blurs the line between testing and type systems.

Fuzzbench ⭐ 669

FuzzBench - Fuzzer benchmarking as a service.

Deepstate ⭐ 649

A unit test-like interface for fuzzing and symbolic execution

Netzob: Protocol Reverse Engineering, Modeling and Fuzzing

Fuzzingbook ⭐ 598

Project page for "The Fuzzing Book"

Tool for automating customized attacks against web applications. Fully made in C language with pthreads, it has fast performance.

coverage guided fuzz testing for javascript

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

Pentesterspecialdict ⭐ 495

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels

QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing

Graphicsfuzz ⭐ 464

A testing framework for automatically finding and simplifying bugs in graphics shader compilers.

Frida Fuzzer ⭐ 458

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

Awesome Fuzzing ⭐ 439

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

Generation-based, context-free grammar fuzzer.

Fuzzdata ⭐ 399

Fuzzing resources for feeding various fuzzers with input. 🔧

Grinder ⭐ 397

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.

JQF + Zest: Coverage-guided semantic fuzzing for Java.

Afl Utils ⭐ 384

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

Fuzzing framework written in python

swiss army knife for hackers

Winappdbg ⭐ 357

WinAppDbg Debugger

Afl Cov ⭐ 352

Produce code coverage results with gcov from afl-fuzz test cases

Pyjfuzz ⭐ 349

PyJFuzz - Python JSON Fuzzer

Caringcaribou ⭐ 325

A friendly car security exploration tool for the CAN bus

Wordlists ⭐ 314

Infosec Wordlists

Protocol Learning and Stateful Fuzzing

Onelistforall ⭐ 299

Rockyou for web fuzzing

Winnie is an end-to-end system that makes fuzzing Windows applications easy

Fuzzer for Linux Kernel Drivers

Cryptofuzz ⭐ 291

Fuzzing cryptographic libraries. Magic bug printer go brrrr.

Commodity Injection Signatures ⭐ 283

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Fuzzcheck Rs ⭐ 270

Structure-aware, coverage-guided fuzzing engine for Rust functions.

Fuzzing Browsers

Honggfuzz Rs ⭐ 256

Fuzz your Rust code with Google-developed Honggfuzz !

QASan is a custom QEMU 3.1.1 that detects memory errors in the guest using AddressSanitizer.

Droid Application Fuzz Framework ⭐ 254

Android application fuzzing framework with fuzzers and crash monitor.

Grizzly ⭐ 246

A cross-platform browser fuzzing framework

A fuzzer for full VM kernel/driver targets

Rapid is a Go library for property-based testing that supports state machine ("stateful" or "model-based") testing and fully automatic test case minimization ("shrinking")

Trophy Case ⭐ 238

🏆 Collection of bugs uncovered by fuzzing Rust code

Certfuzz ⭐ 237

This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities

Filesensor ⭐ 230

Dynamic file detection tool based on crawler 基于爬虫的动态敏感文件探测工具

Fdsploit ⭐ 222

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Berserker ⭐ 222

A list of useful payloads for Web Application Security and Pentest/CTF

Constraint solver based on coverage-guided fuzzing

CLI to integrate continuous fuzzing with Fuzzit (no longer available)

Gramfuzz ⭐ 213

gramfuzz is a grammar-based fuzzer that lets one define complex grammars to generate text and binary data formats.

Academic papers and articles that I read related to web hacking, fuzzing, etc. / 阅读过的Web安全方向、模糊测试方向的一些论文与阅读笔记

Sharpfuzz ⭐ 202

AFL-based fuzz testing for .NET

Javafuzz ⭐ 197

coverage guided fuzz testing for java

Grammarinator ⭐ 186

ANTLR v4 grammar-based test generator

Rest Api Fuzz Testing ⭐ 186

REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows

Simple script for generating Malformed QRCodes.

Pythonfuzz ⭐ 182

coverage guided fuzz testing for python

403fuzzer ⭐ 182

Fuzz 403/401ing endpoints for bypasses

Seeding fuzzers with symbolic execution

Fuzzinator ⭐ 178

Fuzzinator Random Testing Framework

Fuzzfactory ⭐ 178

Domain-Specific Fuzzing with Waypoints

Rust Verification Tools ⭐ 168

RVT is a collection of tools/libraries to support both static and dynamic verification of Rust programs.

An open source fuzzing framework for fun.

1-100 of 151 projects

Advertising 📦 10

Application Programming Interfaces 📦 124

Applications 📦 192

Artificial Intelligence 📦 78

Blockchain 📦 73

Build Tools 📦 113

Cloud Computing 📦 80

Code Quality 📦 28

Collaboration 📦 32

Command Line Interface 📦 49

Community 📦 83

Companies 📦 60

Compilers 📦 63

Computer Science 📦 80

Configuration Management 📦 42

Content Management 📦 175

Control Flow 📦 213

Data Formats 📦 78

Data Processing 📦 276

Data Storage 📦 135

Economics 📦 64

Frameworks 📦 215

Graphics 📦 110

Hardware 📦 152

Integrated Development Environments 📦 49

Learning Resources 📦 166

Libraries 📦 129

Lists Of Projects 📦 22

Machine Learning 📦 347

Mapping 📦 64

Marketing 📦 15

Mathematics 📦 55

Messaging 📦 98

Networking 📦 315

Operating Systems 📦 89

Operations 📦 121

Package Managers 📦 55

Programming Languages 📦 245

Runtime Environments 📦 100

Science 📦 42

Security 📦 396

Social Media 📦 27

Software Architecture 📦 72

Software Development 📦 72

Software Performance 📦 58

Software Quality 📦 133

Text Editors 📦 49

Text Processing 📦 136

User Interface 📦 330

User Interface Components 📦 514

Version Control 📦 30

Virtualization 📦 71

Web Browsers 📦 42

Web Servers 📦 26

Web User Interface 📦 210