Fuzzing
405 items from cpuu/awesome-fuzzing ★1,003
-
VirtFuzz github.com
(2024) - A LibAFL-based Linux kernel fuzzer that injects inputs through VirtIO devices to test wireless stacks.
-
NTFuzz github.com
(2021) - A type-aware Windows kernel fuzzer that statically analyzes system binaries to infer system call types for more effective fuzzing.
-
IMF github.com
(2017) - A kernel API fuzzer that leverages automated API model inference to discover vulnerabilities in macOS kernel APIs.
-
Witcher github.com
A web application fuzzer that utilizes mutational fuzzing to explore web applications and fault escalation to detect command and SQL injection vulnerabilities.
-
StateFuzz github.com
(2022) - A Linux driver fuzzer that identifies state variables through static analysis and uses their values as fuzzing feedback.
-
V-SHUTTLE github.com
(2021) - An AFL-based fuzzer for virtual devices in hosted hypervisors, with semantics-aware input generation.
-
-
SGFuzz github.com
(2022) - A libFuzzer-based fuzzer that adds state-transition feedback to explore stateful software, including network protocol implementations.
-
KextFuzz github.com
(2023) - A fuzzing prototype for macOS kernel extensions on Apple Silicon that instruments extensions and patches entitlement checks.
-
InsTrim github.com
(2018) - A lightweight instrumentation approach for AFL that uses control-flow analysis to reduce the number of instrumented basic blocks while preserving execution path distinguishability.
-
FuzzJIT github.com
(2023) - A Fuzzilli-based JavaScript engine fuzzer that uses an oracle to detect incorrect behavior introduced by JIT compilation.
-
Hoedur github.com
(2023) - An embedded firmware fuzzer that uses multiple input streams to represent interactions with different hardware interfaces.
-
PeriScope github.com
(2019) - A probing and fuzzing framework that tests device drivers at the hardware-OS boundary through MMIO and DMA inputs.
-
SQLRight github.com
(2022) - A DBMS fuzzer that combines coverage feedback, validity-oriented query mutations, and result-checking oracles to detect logical bugs.
-
HyperPill github.com
(2024) - A hypervisor fuzzer that uses the hardware virtualization interface to exercise hypervisor behavior without hypervisor-specific input grammars.
-
RestTestGen github.com
A robust tool and framework designed for automated black-box testing of RESTful web APIs.
-
-
MorFuzz github.com
A generic RISC-V processor fuzzing framework that can efficiently detect software triggerable functional bugs.
-
SyzGen github.com
(2021) - A syscall specification generator that analyzes closed-source macOS drivers to enable interface-aware fuzzing.
-
MINER github.com
A REST API fuzzer that utilizes three data-driven designs working together to guide sequence generation, improve request generation quality, and capture unique errors caused by incorrect parameter usage.
-
ACTOR github.com
(2023) - An action-guided kernel fuzzing framework that generates inputs leveraging triggered actions and their temporal relationships.
-
SyzDirect github.com
(2023) - A directed greybox fuzzer for reaching target locations in the Linux kernel.
-
ViDeZZo github.com
(2023) - A virtual device fuzzing framework that models dependencies within and between messages to test devices in QEMU and VirtualBox.
-
MALintent github.com
(2025) - A coverage-guided Android fuzzer that generates and mutates intents to test application intent receivers.
-
FuzzUSB github.com
(2022) - A hybrid stateful fuzzing framework for USB gadget stacks in the Linux kernel.
-
FuzzNG github.com
(2023) - A Linux kernel syscall fuzzer designed to minimize reliance on manually written system call descriptions.
-
SpecFuzz github.com
A tool that exposes speculative execution paths through software instrumentation so fuzzers can detect Spectre-type vulnerabilities in programs.
-
KRACE github.com
(2020) - A coverage-guided fuzzing framework that detects data races in kernel file systems by exploring concurrency through multi-threaded syscall sequences.
-
SegFuzz github.com
(2023) - A kernel concurrency fuzzer that uses interleaving segment coverage and mutation-based thread scheduling to discover bugs.
-
G2FUZZ github.com
(2025) - An AFL++-based fuzzer that uses LLMs to synthesize and mutate input generators for grammar-aware fuzzing of non-textual formats.
-
DR.FUZZ github.com
(2022) - A semantic-informed driver fuzzer that tests Linux device drivers without their hardware devices or device emulators.
-
CountDown github.com
(2024) - A kernel fuzzer that uses shared reference counts to guide syscall sequences toward use-after-free bugs.
-
Moneta github.com
(2025) - A GPU driver fuzzer that recalls execution states captured on real hardware for ex-vivo fuzzing.
-
RGFuzz github.com
(2025) - A WebAssembly runtime fuzzer that uses compiler rules to guide test generation and compares execution results across runtimes and architectures.
-
MOCK github.com
(2024) - A Linux kernel fuzzer that learns contextual dependencies between syscalls to generate context-aware test cases.
-
Transynther github.com
Automatically generates and tests building blocks for Meltdown attacks with various faults and microcode assists.
-
ResolverFuzz github.com
(2024) - A DNS fuzzer that combines query-response generation with differential analysis to detect non-crash vulnerabilities in resolvers.
-
LOKI github.com
A Blockchain consensus protocol fuzzing framework that detects consensus memory related and logic bugs.
-
SyzTrust github.com
(2024) - An on-device fuzzer for IoT trusted operating systems that uses state and branch coverage to guide input generation.
-
TEFuzz github.com
A tailored fuzzing-based framework to facilitate the detection and exploitation of template escape bugs.
-
AHA-Fuzz github.com
(2025) - An intent-aware greybox fuzzer that uses eBPF-based analysis to test hardened Android applications.
-
FuzzOrigin github.com
(2022) - A browser fuzzer that tests origin handling to discover universal cross-site scripting vulnerabilities.
-
SyzSpec github.com
(2025) - A specification generator for Linux kernel fuzzing that uses under-constrained symbolic execution to infer syscall interfaces.
-
-
BuzzBee github.com
(2024) - A DBMS fuzzer that uses semantic abstraction, context-sensitive constraints, and dependency-guided mutations to generate database queries.
-
American fuzzy lop lcamtuf.coredump.cx
a.k.a. afl-fuzz - Crazy fuzzing tool that automatically discovers bugs given time and minimal example input. [Apache2]
-
CorbFuzz github.com
(2021) - A browser security policy testing framework that synthesizes web application responses to test cross-origin response blocking implementations.
-
Drifuzz github.com
(2022) - A hardware-free device driver fuzzer that combines concolic execution with high-quality initial seed generation.
-
-
- next page of items loading…
