Tools
clusterfuzz
google/clusterfuzz
A scalable fuzzing infrastructure from Google that runs multiple coverage-guided engines, deduplicates crashes, minimizes testcases, and files bugs automatically. It powers OSS-Fuzz and can be deployed on clusters of any size.
Topics
Related projects
oss-fuzz12.9kGoogle's continuous fuzzing service for open-source software, running modern fuzzers at scale to uncover security vulnerabilities and stability bugs.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
brakeman7.3kBrakeman is a static analysis security scanner for Ruby on Rails applications that inspects source code for vulnerabilities and reports findings in multiple formats.- syzkaller6.4kAn unsupervised coverage-guided kernel fuzzer from Google that generates system calls to find bugs across Linux, FreeBSD, Windows, and other kernels. It is a security testing tool run and configured by developers.
cli5.7kThe Snyk CLI scans projects for vulnerabilities across open-source dependencies, application code, container images, and infrastructure-as-code. Developers run it locally, in an IDE, or in CI/CD pipelines to find and fix security issues.
dependency-track4.4kA self-hosted software supply chain analysis platform that uses SBOMs to identify components and known vulnerabilities across projects, helping teams manage open-source dependency risk.