240 Open source projects that are alternatives of or similar to fuzzing

📚 An ultimate collection wordlists of the best-known CMS

JavaFuzz 4 Android

Sample files for fuzzing ImageMagick

expansion of afl-unicorn using c++

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

🐰 Tool set for fuzz and stress testing your functions!

"Seed Selection for Successful Fuzzing" artifact (at ISSTA 2021)

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

Fuzzware's main repository. Start here to install.

Challenging testcases for fuzzers

Python bindings for calling radamsa mutators

Network and USB protocol fuzzing toolkit.

Swift-based fuzzing tools

Verilog Fuzzer to test the major simulators and sythesisers by generating random, valid Verilog.

Kernel fuzzer inspired by Syzkaller.

A grammar-based custom mutator for AFL++

source code audit tool

Improving security and resilience of WebAssembly VMs/runtimes/parsers using fuzzing

Extension library for the Kitty fuzzing framework

SOLTIX: Scalable automated framework for testing Solidity compilers.

Tough Fuzzer is an obstacle course for go-fuzz composed of a series of small code samples which encapsulate the most common obstacles to code-coverage the fuzzer will encounter. In each case, the obstacle is insurmountable in a reasonable period of time using random inputs or even coverage-guided mutation.

Fuzzer to automatically find side-channel (timing) vulnerabilities

Interactive CLI Web Crawler

run AFL with pintool

libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)

Research papers on ML for security

A multi-purpose extensible self-adaptive evolutionary tool

Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.

HTTP fuzzer engine security oriented

FuSeBMC is a novel Energy-Efficient Test Generator that exploits fuzzing and BMC engines to detect security vulnerabilities in real-world C programs.

A simple program reducer for any language.

Rust语言安全相关分析

StateAFL: A Greybox Fuzzer for Stateful Network Servers

Fuzzing Unification Framework

Find exploitable PHP files by parameter fuzzing and function call tracing

My fuzzing corpus

Fuzz testing for jest

The x86 processor fuzzer

A set of tools for fuzzing SecureROM. Managed to find and trigger checkm8.

AFL binary instrumentation

Customizable TCP fuzzing tool to test for remote buffer overflows.

Automatic function exporting and linking for fuzzing cross-architecture binaries.

Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM

AFL "mostly" ported to cygwin

Automatic Exploit Generation Paper

OpenType font file format fuzzer for Windows

go-sqlancer

yet another dirbuster

A distributed fuzzing management framework

This is a repo is to upload files done during my research.

Corpus of crypto formats

A fast SAT solver

RVT is a collection of tools/libraries to support both static and dynamic verification of Rust programs.

A support library for Ronin. Like activesupport, but for hacking!

Curated list of classic fuzzing books, papers about fuzzing at information security top conferences over the years, commonly used fuzzing tools, and resources that can help us use fuzzer easily.

Distributed fuzzing platform

A collection of user-space Linux kernel specific guided fuzzers based on LKL

Network based protocol fuzzer

FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares

Summary of online learning materials