The Top 122 Fuzzing Open Source Projects

Awesome Open Source

Awesome Open Source

Combined Topics

The Top 122 Fuzzing Open Source Projects

Categories > Software Quality > Fuzzing

Awesome Hacking ⭐40,717

A collection of various awesome lists for hackers, pentesters and security researchers

Oss Fuzz ⭐5,570

OSS-Fuzz - continuous fuzzing of open source software.

Hypothesis ⭐4,648

Hypothesis is a powerful, flexible, and easy to use library for property-based testing.

Dirsearch ⭐4,468

Web path scanner

Clusterfuzz ⭐4,340

Scalable fuzzing infrastructure.

the champagne of beta embedded databases

Go Fuzz ⭐3,640

Randomized testing for Go

Awesome Fuzzing ⭐3,278

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

Syzkaller ⭐3,144

syzkaller is an unsupervised coverage-guided kernel fuzzer

Fuzzdicts ⭐2,606

Web Pentesting Fuzz 字典,一个就够了。

Dnstwist ⭐2,541

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Intruderpayloads ⭐2,371

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Honggfuzz ⭐2,011

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

Raccoon ⭐1,894

A high performance offensive security tool for reconnaissance and vulnerability scanning

Fast Check ⭐1,587

Property based testing framework for JavaScript (like QuickCheck) written in TypeScript

Winafl ⭐1,539

A fork of AFL for fuzzing Windows binaries

Hackvault ⭐1,245

A container repository for my public web hacks!

Domato ⭐1,241

Burpsuite Collections ⭐1,081

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

Testing Distributed Systems ⭐1,075

Curated list of resources on testing distributed systems

Boofuzz ⭐1,044

A fork and successor of the Sulley Fuzzing Framework

Rfsec Toolkit ⭐1,012

RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集，可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith

🐇 Fuzzing Rust code with American Fuzzy Lop

Aflplusplus ⭐894

The fuzzer afl++ is afl with community patches, AFLfast power schedules, qemu 3.1 upgrade + laf-intel support, MOpt mutators, InsTrim instrumentation, unicorn_mode, Redqueen and a lot more!

A toolset for reverse engineering and fuzzing Protobuf-based apps

Halfempty ⭐698

A fast, parallel test case minimization tool.

Cargo Fuzz ⭐654

Command line helpers for fuzzing

Paramspider ⭐649

Mining parameters from dark corners of Web Archives

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

Afl Training ⭐607

Exercises to learn how to fuzz with American Fuzzy Lop

Awesome Vulnerability Research ⭐581

🦄 A curated list of the awesome resources about the Vulnerability Research

Sqlancer ⭐570

Detecting Logic Bugs in DBMS

Deepstate ⭐564

A unit test-like interface for fuzzing and symbolic execution

Fuzzbench ⭐526

FuzzBench - Fuzzer benchmarking as a service.

Netzob: Protocol Reverse Engineering, Modeling and Fuzzing

coverage guided fuzz testing for javascript

Fuzzingpaper ⭐492

Recent Fuzzing Paper

Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels

Web security tool to make fuzzing at HTTP/S, Beta

QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing

Graphicsfuzz ⭐418

A testing framework for automatically finding and simplifying bugs in graphics shader compilers.

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.

Generation-based, context-free grammar fuzzer.

Afl Utils ⭐379

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

Frida Fuzzer ⭐364

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

Fuzzdata ⭐353

Fuzzing resources for feeding various fuzzers with input. 🔧

Paper_collection ⭐346

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

Fuzzing framework written in python

Awesome Fuzzing ⭐339

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

PyJFuzz - Python JSON Fuzzer

Produce code coverage results with gcov from afl-fuzz test cases

Winappdbg ⭐313

WinAppDbg Debugger

swiss army knife for hackers

JQF + Zest: Coverage-guided semantic fuzzing for Java.

Fuzzer for Linux Kernel Drivers

Caringcaribou ⭐270

A friendly car security exploration tool for the CAN bus

Protocol Learning and Stateful Fuzzing

Dictionary Of Pentesting ⭐259

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Fuzzing Browsers

Droid Application Fuzz Framework ⭐238

Android application fuzzing framework with fuzzers and crash monitor.

Commodity Injection Signatures ⭐236

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

CLI to integrate continuous fuzzing with Fuzzit

Filesensor ⭐218

Dynamic file detection tool based on crawler 基于爬虫的动态敏感文件探测工具

A cross-platform browser fuzzing framework

Constraint solver based on coverage-guided fuzzing

Honggfuzz Rs ⭐200

Fuzz your Rust code with Google-developed Honggfuzz !

Trophy Case ⭐199

🏆 Collection of bugs uncovered by fuzzing Rust code

Gramfuzz ⭐194

gramfuzz is a grammar-based fuzzer that lets one define complex grammars to generate text and binary data formats.

Berserker ⭐193

A list of useful payloads for Web Application Security and Pentest/CTF

Javafuzz ⭐188

coverage guided fuzz testing for java

Wordlists ⭐181

Infosec Wordlists

QASan is a custom QEMU 3.1.1 that detects memory errors in the guest using AddressSanitizer.

Rapid is a Go library for property-based testing that supports state machine ("stateful" or "model-based") testing and fully automatic test case minimization ("shrinking")

Sharpfuzz ⭐170

AFL-based fuzz testing for .NET

Fdsploit ⭐168

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

An open source fuzzing framework for fun.

Seeding fuzzers with symbolic execution

Cryptofuzz ⭐166

Fuzzinator ⭐161

Fuzzinator Random Testing Framework

Pythonfuzz ⭐161

coverage guided fuzz testing for python

Fuzzcheck Rs ⭐160

Structure-aware, in-process, coverage-guided, evolutionary fuzzing engine for Rust functions.

Simple script for generating Malformed QRCodes.

Fuzzing and Data Manipulation Framework (for GNU/Linux)

Grammarinator ⭐153

ANTLR v4 grammar-based test generator

Fuzzfactory ⭐152

Domain-Specific Fuzzing with Waypoints

Libdiffuzz ⭐145

Custom memory allocator that helps discover reads from uninitialized memory

A fuzzer for full VM kernel/driver targets

Canadian Furious Beaver is a tool for hijacking IRPs handler in Windows drivers, and facilitating the process of analyzing Windows drivers for vulnerabilities

Sienna Locomotive ⭐126

A user-friendly fuzzing and crash triage tool for Windows

Janus: a state-of-the-art file system fuzzer on Linux

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities

A fast SAT solver

Clusterfuzz Tools ⭐111

Bugs are inevitable. Suffering is optional.

wooyun public information backup

Randomly mutate JSON, XML, HTML forms, text and binary data for fuzz testing

Fisy Fuzz ⭐107

This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April.

A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.

Websocket Fuzzer ⭐106

HTML5 WebSocket message fuzzer

A fuzzing library in JavaScript. ✨

1-100 of 122 projects