{"id":45921347,"url":"https://github.com/dergoegge/fuzzor","last_synced_at":"2026-02-28T08:50:25.775Z","repository":{"id":336767377,"uuid":"768224231","full_name":"dergoegge/fuzzor","owner":"dergoegge","description":"Experimental continuous fuzzing infrastructure","archived":false,"fork":false,"pushed_at":"2026-01-12T13:14:54.000Z","size":458,"stargazers_count":2,"open_issues_count":8,"forks_count":1,"subscribers_count":2,"default_branch":"master","last_synced_at":"2026-02-06T11:34:16.500Z","etag":null,"topics":["fuzzing"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dergoegge.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-03-06T17:36:37.000Z","updated_at":"2026-01-30T13:23:06.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/dergoegge/fuzzor","commit_stats":null,"previous_names":["dergoegge/fuzzor"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/dergoegge/fuzzor","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dergoegge%2Ffuzzor","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dergoegge%2Ffuzzor/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dergoegge%2Ffuzzor/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dergoegge%2Ffuzzor/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dergoegge","download_url":"https://codeload.github.com/dergoegge/fuzzor/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dergoegge%2Ffuzzor/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29929095,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-27T19:37:42.220Z","status":"online","status_checked_at":"2026-02-28T02:00:07.010Z","response_time":90,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["fuzzing"],"created_at":"2026-02-28T08:50:25.123Z","updated_at":"2026-02-28T08:50:25.761Z","avatar_url":"https://github.com/dergoegge.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Fuzzor\n\nWork in progress continuous fuzzing infrastructure. Mainly build and maintained\nto continuously fuzz [Bitcoin Core](https://github.com/bitcoin/bitcoin) but\nsupport for adding and fuzzing other projects is available (see `projects/`).\n\n## Quick Start\n\n```bash\ndocker build --tag fuzzor-base:latest --file infra/Dockerfile.base .\n\ncd projects/bitcoin\ndocker build --tag fuzzor-bitcoin:latest .\n\ndocker run -it fuzzor-bitcoin:latest\n\nFUZZ=txgraph ./out/libfuzzer_asan/fuzz\n```\n\n## Features\n\n- Automatic bug reports\n- Automatic coverage report creation\n- Support for major fuzzing engines\n  ([`AFL++`](https://github.com/AFLplusplus/AFLplusplus),\n  [`libFuzzer`](https://llvm.org/docs/LibFuzzer.html),\n  [`honggfuzz`](https://github.com/google/honggfuzz), [`Native\n  Golang`](https://go.dev/doc/security/fuzz/))\n- Crash deduplication\n- Corpus minimization with all supported engines\n- Real-time ensemble fuzzing\n- Coverage based campaign scheduling\n- Support for experimental fuzzing engines (e.g. fuzz driven characterization\n  testing with [SemSan](https://github.com/dergoegge/semsan))\n\n### Planned Features\n\n- Support for more fuzzing engines (e.g.\n  [`Radamsa`](https://gitlab.com/akihe/radamsa),\n  [`libafl_libfuzzer`](https://github.com/AFLplusplus/LibAFL/tree/main/libafl_libfuzzer),\n  [`libafl-fuzz`](https://github.com/AFLplusplus/LibAFL/tree/main/fuzzers/forkserver/libafl-fuzz),\n  ...)\n- Snapshot fuzzing support (e.g. using full-system\n  [`libafl_qemu`](https://github.com/AFLplusplus/LibAFL/tree/main/libafl_qemu)\n  and/or [`nyx`](https://nyx-fuzz.com/))\n- Concolic fuzzing engine support\n- Automatic bug triaging\n- Automatic pull request fuzzing\n\n## Bugs discovered by Fuzzor\n\n- core-lightning: fuzz-connectd-handshake-act2: Assertion 'write_count == 1 \u0026\u0026 \"too many calls to io_write()\"' ([details]())\n- core-lightning: fuzz-cryptomsg: Assertion 'cryptomsg_decrypt_body(buf, \u0026cs_in, buf) == NULL' ([details]())\n- core-lightning: fuzz-bolt12-bech32-decode: index 128 out of bounds for type 'const int8_t[128]' ([details](https://github.com/ElementsProject/lightning/pull/7322))\n- lnd: FuzzProbability: normalization factor is zero ([details](https://github.com/lightningnetwork/lnd/issues/9085))\n- lnd: FuzzReplyChannelRange: failed to encode message to buffer ([details](https://github.com/lightningnetwork/lnd/pull/9084))\n- bitcoin: wallet_bdb_parser: BDB builtin encryption is not supported ([details](https://github.com/bitcoin/bitcoin/issues/30166))\n- bitcoin: rpc: runtime error: reference binding to null pointer of type 'const value_type' ([details](https://github.com/bitcoin/bitcoin/pull/29855))\n- bitcoin: script: Assertion '!extract_destination_ret' failed ([details](https://github.com/bitcoin/bitcoin/issues/30615))\n- bitcoin: scriptpubkeyman: heap-buffer-overflow miniscript.cpp in CScript BuildScript ([details](https://github.com/bitcoin/bitcoin/issues/30864))\n- bitcoin: p2p_headers_presync: Assertion 'total_work \u003c chainman.MinimumChainWork()' failed ([details](https://github.com/bitcoin/bitcoin/pull/31213))\n- bitcoin: connman: terminate called after throwing an instance of 'std::bad_alloc' ([details]())\n- bitcoin #30243: mocked_descriptor_parse: Assertion '(leaf_version \u0026 ~TAPROOT_LEAF_MASK) == 0' failed ([details](https://github.com/bitcoin/bitcoin/pull/30243#issuecomment-2169240015))\n- bitcoin #31244: various descriptor parsing crashes ([details](https://github.com/bitcoin/bitcoin/pull/31244#issuecomment-2527475671))\n- bitcoin #28584: null-ptr deref ([details](https://github.com/bitcoin/bitcoin/pull/28584#issuecomment-2527495228))\n- bitcoin #28584: use of uninitialized memory ([details](https://github.com/bitcoin/bitcoin/pull/28584#issuecomment-2531288821))","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdergoegge%2Ffuzzor","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdergoegge%2Ffuzzor","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdergoegge%2Ffuzzor/lists"}