Tools
AFLplusplus
AFLplusplus/AFLplusplus
AFL++ is a state-of-the-art coverage-guided fuzzer with advanced instrumentation, mutation strategies, and QEMU/Unicorn modes for finding software vulnerabilities.
Topics
Related projects
syzkaller6.4kAn unsupervised coverage-guided kernel fuzzer from Google that generates system calls to find bugs across Linux, FreeBSD, Windows, and other kernels. It is a security testing tool run and configured by developers.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.- oss-fuzz12.9kGoogle's continuous fuzzing service for open-source software, running modern fuzzers at scale to uncover security vulnerabilities and stability bugs.
winafl2.6kA Windows fork of AFL that performs coverage-guided fuzzing of Windows binaries via DynamoRIO, TinyInst, Intel PT or Syzygy instrumentation, used widely in vulnerability research.
contract-fuzzer1.4kA Python smart-contract fuzzer for the EVM that compiles Solidity, discovers echidna_* property functions, and runs randomized call sequences to check invariants.
jazzer1.3kJazzer is a coverage-guided, in-process fuzzer for the JVM that integrates with JUnit and build tools, using built-in sanitizers to uncover security bugs in Java and Kotlin code.