fuzzbench

FuzzBench: Fuzzer Benchmarking As a Service FuzzBench is a free service that evaluates fuzzers on a wide variety of real-world benchmarks, at Google scale. The goal of FuzzBench is to make it painless to rigorously evaluate fuzzing research and make fuzzing research easier for the community to...

autoharness

AutoHarness Created by Akshat Parikh What is this tool? AutoHarness is a tool that automatically generates fuzzing harnesses for you. This idea stems from a concurrent problem in fuzzing codebases today: large codebases have thousands of functions and pieces of code that can be embedded fairly de...

ruzzy

Ruzzy A coverage-guided fuzzer for pure Ruby code and Ruby C extensions. Ruzzy is heavily inspired by Google's Atheris, a Python fuzzer. Ruzzy uses libFuzzer or LibAFL for its coverage instrumentation and fuzzing engine. Ruzzy also supports AddressSanitizer and UndefinedBehaviorSanitizer when...

uniFuzzer

uniFuzzer uniFuzzer is a fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer. Currently it supports fuzzing 32-bits LSB ELF files on ARM/MIPS, which are usually seen in IoT devices. 中文介绍 Features very little hack and easy to build can target any specified function or code snipp...

fuzzuf

fuzzuf Build Status fuzzuf fuzz ing u nification f ramework is a fuzzing framework with its own DSL to describe a fuzzing loop by constructing building blocks of fuzzing primitives. For build instructions and a tutorial, please follow building.md and tutorial.md. Why use fuzzuf? fuzzuf enables a...

unicorn

Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

cargo-fuzz

cargo fuzz Подкомандаcargo для фаззинга с помощью libFuzzer! Проста в использовании! Установка $ cargo install cargo-fuzz Примечание: libFuzzer требует поддержки санитайзеров LLVM, поэтому работает только на x86-64 и Aarch64, и только в Unix-подобных операционных системах не в Windows. Также...

oss-fuzz

OSS-Fuzz : Fuzzing continu pour les logiciels open source Le fuzz testing est une technique bien connue pour découvrir des erreurs de programmation dans les logiciels. Beaucoup de ces erreurs détectables, comme le débordement de tampon, peuvent avoir de sérieuses implications en matière de...

CVE-2023-4863-

CVE-2023-4863 Triggering the famous libweb 0day vuln with libfuzzer...

centipede

Centipede - a distributed fuzzing engine. Work-in-progress. Why Centipede Why not? We are currently trying to fuzz some very large and very slow targets for which libFuzzer, AFL, and the like do not necessarily scale well. For one of our motivating examples see SiliFuzz. While working on Centiped...

Pishi

Pishi Pishi is a static binary rewriting tool designed to instrument basic blocks in XNU kernel and in arbitrary macOS kernel extensions kexts. for XNU kernel, Pishi allows you to instrument at a function, file, or folder level. For example, you can instrument everything in the /bsd/net/ director...

bunch-of-fuzzers-developed-using-libfuzzer-and-asan

bunch-of-fuzzers-developed-using-libfuzzer-and-asan...

fuzzing

libfuzzer-workshop Materials of "Modern fuzzing of C/C++ Projects" workshop. The first version of the workshop had been presented at ZeroNights'16 security conference. Disclaimer This workshop was originally developed in 2016. As of today 2021 and beyond, the practical side of the workshop might ...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_analyze_inlines

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=5201213151576064 Project: md4c Fuzzing Engine: libFuzzer Fuzz Target: fuzz-mdhtml Job Type: libfuzzerasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7cab03be4f9c Crash...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in Flow::dissectMDNS

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5881946677510144 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

wasm3:fuzzer: Crash in op_i64_Load_i32_s

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4832595972784128 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x753cf149f573 Crash State:...

llvm:llvm-special-case-list-fuzzer: Crash in p_ere

Detailed Report: https://oss-fuzz.com/testcase?key=6388532688781312 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b6587ce1ff0 Crash State: pere pere pere Sanitizer: addre...

openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6399125835546624 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address...

wasm3:fuzzer: Heap-buffer-overflow in m3_CallVL

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6319953280827392 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x77e5c33e00d0 Crash...