The Top 141 Fuzzing Open Source Projects

Awesome Open Source

Awesome Open Source

Combined Topics

Advertising 📦 10

Application Programming Interfaces 📦 124

Applications 📦 192

Artificial Intelligence 📦 78

Blockchain 📦 73

Build Tools 📦 113

Cloud Computing 📦 80

Code Quality 📦 28

Collaboration 📦 32

Command Line Interface 📦 49

Community 📦 83

Companies 📦 60

Compilers 📦 63

Computer Science 📦 80

Configuration Management 📦 42

Content Management 📦 175

Control Flow 📦 213

Data Formats 📦 78

Data Processing 📦 276

Data Storage 📦 135

Economics 📦 64

Frameworks 📦 215

Graphics 📦 110

Hardware 📦 152

Integrated Development Environments 📦 49

Learning Resources 📦 166

Libraries 📦 129

Lists Of Projects 📦 22

Machine Learning 📦 347

Mapping 📦 64

Marketing 📦 15

Mathematics 📦 55

Messaging 📦 98

Networking 📦 315

Operating Systems 📦 89

Operations 📦 121

Package Managers 📦 55

Programming Languages 📦 245

Runtime Environments 📦 100

Science 📦 42

Security 📦 396

Social Media 📦 27

Software Architecture 📦 72

Software Development 📦 72

Software Performance 📦 58

Software Quality 📦 133

Text Editors 📦 49

Text Processing 📦 136

User Interface 📦 330

User Interface Components 📦 514

Version Control 📦 30

Virtualization 📦 71

Web Browsers 📦 42

Web Servers 📦 26

Web User Interface 📦 210

The Top 141 Fuzzing Open Source Projects

Categories > Software Quality > Fuzzing

Awesome Hacking ⭐ 43,641

A collection of various awesome lists for hackers, pentesters and security researchers

Oss Fuzz ⭐ 6,189

OSS-Fuzz - continuous fuzzing for open source software.

Dirsearch ⭐ 5,858

Web path scanner

Hypothesis ⭐ 5,087

Hypothesis is a powerful, flexible, and easy to use library for property-based testing.

the champagne of beta embedded databases

Clusterfuzz ⭐ 4,487

Scalable fuzzing infrastructure.

Go Fuzz ⭐ 3,928

Randomized testing for Go

Awesome Fuzzing ⭐ 3,586

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

Syzkaller ⭐ 3,453

syzkaller is an unsupervised coverage-guided kernel fuzzer

Fuzzdicts ⭐ 3,184

Web Pentesting Fuzz 字典,一个就够了。

Dnstwist ⭐ 2,807

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Intruderpayloads ⭐ 2,530

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Honggfuzz ⭐ 2,183

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

Fast Check ⭐ 2,086

Property based testing framework for JavaScript (like QuickCheck) written in TypeScript

Raccoon ⭐ 2,047

A high performance offensive security tool for reconnaissance and vulnerability scanning

Winafl ⭐ 1,642

A fork of AFL for fuzzing Windows binaries

Aflplusplus ⭐ 1,563

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

Hackvault ⭐ 1,391

A container repository for my public web hacks!

Domato ⭐ 1,300

Testing Distributed Systems ⭐ 1,204

Curated list of resources on testing distributed systems

Boofuzz ⭐ 1,197

A fork and successor of the Sulley Fuzzing Framework

Rfsec Toolkit ⭐ 1,087

RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集，可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith

Burpsuite Collections ⭐ 1,081

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

Reconftw ⭐ 1,078

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Afl.rs ⭐ 1,029

🐇 Fuzzing Rust code with American Fuzzy Lop

Paramspider ⭐ 830

Mining parameters from dark corners of Web Archives

Fuzzingpaper ⭐ 812

Recent Fuzzing Paper

A toolset for reverse engineering and fuzzing Protobuf-based apps

Packer Fuzzer ⭐ 791

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

Halfempty ⭐ 762

A fast, parallel test case minimization tool.

Afl Training ⭐ 744

Exercises to learn how to fuzz with American Fuzzy Lop

Cargo Fuzz ⭐ 730

Command line helpers for fuzzing

Paper_collection ⭐ 716

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

Sqlancer ⭐ 685

Detecting Logic Bugs in DBMS

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

Awesome Vulnerability Research ⭐ 664

🦄 A curated list of the awesome resources about the Vulnerability Research

Fuzzbench ⭐ 620

FuzzBench - Fuzzer benchmarking as a service.

Crosshair ⭐ 605

An analysis tool for Python that blurs the line between testing and type systems.

Deepstate ⭐ 604

A unit test-like interface for fuzzing and symbolic execution

Netzob: Protocol Reverse Engineering, Modeling and Fuzzing

Fuzzingbook ⭐ 554

Project page for "The Fuzzing Book"

coverage guided fuzz testing for javascript

Dictionary Of Pentesting ⭐ 519

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Tool for automating customized attacks against web applications. Fully made in C language with pthreads, it has fast performance.

Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels

QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing

Graphicsfuzz ⭐ 449

A testing framework for automatically finding and simplifying bugs in graphics shader compilers.

Frida Fuzzer ⭐ 423

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

Generation-based, context-free grammar fuzzer.

Pentesterspecialdict ⭐ 416

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

Awesome Fuzzing ⭐ 406

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

Grinder ⭐ 393

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.

Fuzzdata ⭐ 386

Fuzzing resources for feeding various fuzzers with input. 🔧

Afl Utils ⭐ 384

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

Fuzzing framework written in python

swiss army knife for hackers

Pyjfuzz ⭐ 344

PyJFuzz - Python JSON Fuzzer

Winappdbg ⭐ 343

WinAppDbg Debugger

Afl Cov ⭐ 343

Produce code coverage results with gcov from afl-fuzz test cases

JQF + Zest: Coverage-guided semantic fuzzing for Java.

Caringcaribou ⭐ 300

A friendly car security exploration tool for the CAN bus

Protocol Learning and Stateful Fuzzing

Fuzzer for Linux Kernel Drivers

Wordlists ⭐ 278

Infosec Wordlists

Cryptofuzz ⭐ 272

Fuzzing cryptographic libraries. Magic bug printer go brrrr.

Commodity Injection Signatures ⭐ 269

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Fuzzing Browsers

Droid Application Fuzz Framework ⭐ 249

Android application fuzzing framework with fuzzers and crash monitor.

Fuzzcheck Rs ⭐ 248

Structure-aware, in-process, coverage-guided, evolutionary fuzzing engine for Rust functions.

QASan is a custom QEMU 3.1.1 that detects memory errors in the guest using AddressSanitizer.

Grizzly ⭐ 235

A cross-platform browser fuzzing framework

Certfuzz ⭐ 233

This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).

Filesensor ⭐ 229

Dynamic file detection tool based on crawler 基于爬虫的动态敏感文件探测工具

Honggfuzz Rs ⭐ 226

Fuzz your Rust code with Google-developed Honggfuzz !

Trophy Case ⭐ 225

🏆 Collection of bugs uncovered by fuzzing Rust code

CLI to integrate continuous fuzzing with Fuzzit

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities

Rapid is a Go library for property-based testing that supports state machine ("stateful" or "model-based") testing and fully automatic test case minimization ("shrinking")

Onelistforall ⭐ 217

Rockyou for web fuzzing

Constraint solver based on coverage-guided fuzzing

A fuzzer for full VM kernel/driver targets

Berserker ⭐ 213

A list of useful payloads for Web Application Security and Pentest/CTF

Gramfuzz ⭐ 209

gramfuzz is a grammar-based fuzzer that lets one define complex grammars to generate text and binary data formats.

Fdsploit ⭐ 203

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Javafuzz ⭐ 194

coverage guided fuzz testing for java

Sharpfuzz ⭐ 191

AFL-based fuzz testing for .NET

Academic papers and articles that I read related to web hacking, fuzzing, etc. / 阅读过的Web安全方向、模糊测试方向的一些论文与阅读笔记

Simple script for generating Malformed QRCodes.

Pythonfuzz ⭐ 177

coverage guided fuzz testing for python

Seeding fuzzers with symbolic execution

Fuzzfactory ⭐ 169

Domain-Specific Fuzzing with Waypoints

An open source fuzzing framework for fun.

Grammarinator ⭐ 165

ANTLR v4 grammar-based test generator

Fuzzinator ⭐ 164

Fuzzinator Random Testing Framework

Fuzzing and Data Manipulation Framework (for GNU/Linux)

Fuzzing Stuff ⭐ 149

Resources About Fuzzing, For Multiple Platforms And All Popular Fuzzers. 500+ Open Source Tools Sorted By Star Count, 800+ Blog Posts Sorted By Publish Time.

Libdiffuzz ⭐ 146

Custom memory allocator that helps discover reads from uninitialized memory

Canadian Furious Beaver is a tool for hijacking IRPs handler in Windows drivers, and facilitating the process of analyzing Windows drivers for vulnerabilities

Janus: a state-of-the-art file system fuzzer on Linux

1-100 of 141 projects

Advertising 📦 10

Application Programming Interfaces 📦 124

Applications 📦 192

Artificial Intelligence 📦 78

Blockchain 📦 73

Build Tools 📦 113

Cloud Computing 📦 80

Code Quality 📦 28

Collaboration 📦 32

Command Line Interface 📦 49

Community 📦 83

Companies 📦 60

Compilers 📦 63

Computer Science 📦 80

Configuration Management 📦 42

Content Management 📦 175

Control Flow 📦 213

Data Formats 📦 78

Data Processing 📦 276

Data Storage 📦 135

Economics 📦 64

Frameworks 📦 215

Graphics 📦 110

Hardware 📦 152

Integrated Development Environments 📦 49

Learning Resources 📦 166

Libraries 📦 129

Lists Of Projects 📦 22

Machine Learning 📦 347

Mapping 📦 64

Marketing 📦 15

Mathematics 📦 55

Messaging 📦 98

Networking 📦 315

Operating Systems 📦 89

Operations 📦 121

Package Managers 📦 55

Programming Languages 📦 245

Runtime Environments 📦 100

Science 📦 42

Security 📦 396

Social Media 📦 27

Software Architecture 📦 72

Software Development 📦 72

Software Performance 📦 58

Software Quality 📦 133

Text Editors 📦 49

Text Processing 📦 136

User Interface 📦 330

User Interface Components 📦 514

Version Control 📦 30

Virtualization 📦 71

Web Browsers 📦 42

Web Servers 📦 26

Web User Interface 📦 210