Tools
fuzzbench
google/fuzzbench
FuzzBench is a free service from Google that rigorously benchmarks fuzzers against real-world projects, offering an integration API and statistical reports.
Topics
Related projects
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
oss-fuzz12.9kGoogle's continuous fuzzing service for open-source software, running modern fuzzers at scale to uncover security vulnerabilities and stability bugs.- syzkaller6.4kAn unsupervised coverage-guided kernel fuzzer from Google that generates system calls to find bugs across Linux, FreeBSD, Windows, and other kernels. It is a security testing tool run and configured by developers.
- clusterfuzz5.6kA scalable fuzzing infrastructure from Google that runs multiple coverage-guided engines, deduplicates crashes, minimizes testcases, and files bugs automatically. It powers OSS-Fuzz and can be deployed on clusters of any size.
- honggfuzz3.4kHonggfuzz is a security-oriented, feedback-driven fuzzer that uses software and hardware code coverage to evolve inputs, supporting persistent multi-process fuzzing to find bugs and vulnerabilities fast.
winafl2.6kA Windows fork of AFL that performs coverage-guided fuzzing of Windows binaries via DynamoRIO, TinyInst, Intel PT or Syzygy instrumentation, used widely in vulnerability research.