Tools
winafl
googleprojectzero/winafl
A Windows fork of AFL that performs coverage-guided fuzzing of Windows binaries via DynamoRIO, TinyInst, Intel PT or Syzygy instrumentation, used widely in vulnerability research.
Topics
Related projects
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
oss-fuzz12.9kGoogle's continuous fuzzing service for open-source software, running modern fuzzers at scale to uncover security vulnerabilities and stability bugs.
AFLplusplus6.9kAFL++ is a state-of-the-art coverage-guided fuzzer with advanced instrumentation, mutation strategies, and QEMU/Unicorn modes for finding software vulnerabilities.- syzkaller6.4kAn unsupervised coverage-guided kernel fuzzer from Google that generates system calls to find bugs across Linux, FreeBSD, Windows, and other kernels. It is a security testing tool run and configured by developers.
- clusterfuzz5.6kA scalable fuzzing infrastructure from Google that runs multiple coverage-guided engines, deduplicates crashes, minimizes testcases, and files bugs automatically. It powers OSS-Fuzz and can be deployed on clusters of any size.
- honggfuzz3.4kHonggfuzz is a security-oriented, feedback-driven fuzzer that uses software and hardware code coverage to evolve inputs, supporting persistent multi-process fuzzing to find bugs and vulnerabilities fast.