Tools
syzkaller
google/syzkaller
An unsupervised coverage-guided kernel fuzzer from Google that generates system calls to find bugs across Linux, FreeBSD, Windows, and other kernels. It is a security testing tool run and configured by developers.
Topics
Related projects
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
oss-fuzz12.9kGoogle's continuous fuzzing service for open-source software, running modern fuzzers at scale to uncover security vulnerabilities and stability bugs.
AFLplusplus6.9kAFL++ is a state-of-the-art coverage-guided fuzzer with advanced instrumentation, mutation strategies, and QEMU/Unicorn modes for finding software vulnerabilities.
echidna3.2kA fast property-based fuzzer for Ethereum smart contracts that generates ABI-aware call sequences to falsify invariants, with multiple test modes, coverage collection and CI integration.
contract-fuzzer1.4kA Python smart-contract fuzzer for the EVM that compiles Solidity, discovers echidna_* property functions, and runs randomized call sequences to check invariants.
pulsar1.1kPulsar is an eBPF-powered runtime security tool for Linux and IoT devices that monitors process, file, and network activity against customizable rules.