oss-fuzz

OSS-Fuzz: Continuous Fuzzing for Open Source Software Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and...

cargo-fuzz

cargo fuzz Acargo subcommand for fuzzing with libFuzzer! Easy to use! Installation $ cargo install cargo-fuzz Note: libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64, and only on Unix-like operating systems not Windows. This also needs a nightly compiler since it us...

oss-fuzz-gen

A Framework for Fuzz Target Generation and Evaluation This framework generates fuzz targets for real-world C/C++/Java/Python projects with various Large Language Models LLM and benchmarks them via the OSS-Fuzz platform. More details available in AI-Powered Fuzzing: Breaking the Bug Hunting Barrie...

Protocol-Analyzer

Protocol Analyzer NetProtoFuzz Protocol-oriented fuzz testing framework for network protocols. Codacy Badge Framework and Scanner under the deep development. Version 0.0.12. The main purposes of the framework Verification of the operation of proprietary network protocols in accordance with the...

fuzzbench

FuzzBench: Fuzzer Benchmarking As a Service FuzzBench is a free service that evaluates fuzzers on a wide variety of real-world benchmarks, at Google scale. The goal of FuzzBench is to make it painless to rigorously evaluate fuzzing research and make fuzzing research easier for the community to...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

slither

Slither, the smart contract static analyzer Join the Empire Hacking Slack - Discussions and Support Slither is a Solidity & Vyper static analysis framework written in Python3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to...

peach

Peach Fuzz - Vulnerability Scanning Framework This tool aims to look through files in a given directory to detect any unsafe, vulnerable, or dangerous function calls. It is designed to be extensible and easy to understand; you can "plug-and-play" modules that specify criteria on which types of...

fisy-fuzz

FIle SYstem - FUZZer This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April. Conference Talk Conference Talk Single Video Conference Material Goal The goal of this framework is to uncover kernel security bugs on UNIX system...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

IntruderPayloads

IntruderPayloads A collection of Burpsuite Intruder payloads, BurpBounty payloads https://github.com/wagiro/BurpBounty, fuzz lists and pentesting methodologies. To pull down all 3rd party repos, run install.sh in the same directory of the IntruderPayloads folder. Author: [email protected] -...

fuzz-wooyun-org

fuzz-wooyun-org WooYun Fuzz Library...

sulley

Lack of maintenance? If you're looking for an actively maintained fork of Sulley, take a look at BooFuzz. What? Sulley is a fuzzing engine and fuzz testing framework consisting of multiple extensible components. Sulley IMHO exceeds the capabilities of most previously published fuzzing technologie...

test-fuzz

test-fuzz test-fuzz is a Cargo subcommand and a collection of Rust macros to automate certain tasks related to fuzzing with afl.rs, including: generating a fuzzing corpus implementing a fuzzing harness test-fuzz accomplishes these in part using Rust's testing facilities. For example, to generate ...

clusterfuzz

ClusterFuzz ClusterFuzz es una infraestructura de fuzzing escalable que encuentra problemas de seguridad y estabilidad en software. Google utiliza ClusterFuzz para fuzzear todos los productos de Google y como backend de fuzzing para OSS-Fuzz. ClusterFuzz proporciona muchas características que...

cargo-fuzz

cargo fuzz Un sottocomandocargo per il fuzzing con libFuzzer! Facile da usare! Installazione $ cargo install cargo-fuzz Nota: libFuzzer richiede il supporto dei sanitizer LLVM, quindi funziona solo su x86-64 e Aarch64, e solo su sistemi operativi Unix-like non Windows. Richiede anche un compilato...

oss-fuzz

OSS-Fuzz: Fuzzing Continuo per Software Open Source Il fuzz testing è una tecnica ben nota per scoprire errori di programmazione nel software. Molti di questi errori rilevabili, come il buffer overflow, possono avere serie implicazioni per la sicurezza. Google ha trovato migliaia di vulnerabilità...

Zabbix <=4.4 - Authentication Bypass

Zabbix through 4.4 is susceptible to an authentication bypass vulnerability via zabbix.php?action=dashboard.view&dashboardid=1. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password i.e., anonymously...

tmux-fuzzing

Fuzzing Lab: Enhancing Fuzzing for tmux Software Security @ EPFL, Spring 2025 Abstract In this lab, we enhanced the fuzzing efforts for the tmux terminal multiplexer within Google's OSS-Fuzz infrastructure. We first established a baseline by evaluating the line coverage of the existing input-fuzz...

UTopia

Introduction UTopia is a tool for automatically generating fuzz drivers from unit tests. UTopia will let developers perform fuzz testing without special knowledge about writing fuzzers. Even developers familiar with fuzzing can save significant time by generating fuzz drivers automatically. UTopi...