Tools
oss-fuzz
google/oss-fuzz
Google's continuous fuzzing service for open-source software, running modern fuzzers at scale to uncover security vulnerabilities and stability bugs.
Topics
Related projects
clusterfuzz5.6kA scalable fuzzing infrastructure from Google that runs multiple coverage-guided engines, deduplicates crashes, minimizes testcases, and files bugs automatically. It powers OSS-Fuzz and can be deployed on clusters of any size.- syzkaller6.4kAn unsupervised coverage-guided kernel fuzzer from Google that generates system calls to find bugs across Linux, FreeBSD, Windows, and other kernels. It is a security testing tool run and configured by developers.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
brakeman7.3kBrakeman is a static analysis security scanner for Ruby on Rails applications that inspects source code for vulnerabilities and reports findings in multiple formats.
AFLplusplus6.9kAFL++ is a state-of-the-art coverage-guided fuzzer with advanced instrumentation, mutation strategies, and QEMU/Unicorn modes for finding software vulnerabilities.
cli5.7kThe Snyk CLI scans projects for vulnerabilities across open-source dependencies, application code, container images, and infrastructure-as-code. Developers run it locally, in an IDE, or in CI/CD pipelines to find and fix security issues.