{"id":21594663,"url":"https://github.com/ispras/oss-sydr-fuzz","last_synced_at":"2025-04-10T23:41:57.181Z","repository":{"id":38355679,"uuid":"415895268","full_name":"ispras/oss-sydr-fuzz","owner":"ispras","description":"OSS-Sydr-Fuzz - OSS-Fuzz fork for hybrid fuzzing (fuzzer+DSE) open source software.","archived":false,"fork":false,"pushed_at":"2024-04-16T16:07:35.000Z","size":11261,"stargazers_count":104,"open_issues_count":2,"forks_count":32,"subscribers_count":9,"default_branch":"master","last_synced_at":"2024-04-17T06:08:33.523Z","etag":null,"topics":["concolic","concolic-execution","dse","dynamic-symbolic-execution","fuzz-testing","fuzzing","hybrid-fuzzing","libfuzzer","oss-fuzz","security","stability","sydr","sydr-fuzz","symbolic","symbolic-execution","vulnerabilities"],"latest_commit_sha":null,"homepage":"https://sydr-fuzz.github.io","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ispras.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2021-10-11T11:25:20.000Z","updated_at":"2024-04-18T12:42:47.319Z","dependencies_parsed_at":"2023-12-31T11:27:45.408Z","dependency_job_id":"ea40b26c-09a2-4536-9b54-9a4f23b90904","html_url":"https://github.com/ispras/oss-sydr-fuzz","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ispras%2Foss-sydr-fuzz","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ispras%2Foss-sydr-fuzz/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ispras%2Foss-sydr-fuzz/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ispras%2Foss-sydr-fuzz/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ispras","download_url":"https://codeload.github.com/ispras/oss-sydr-fuzz/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248317732,"owners_count":21083527,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["concolic","concolic-execution","dse","dynamic-symbolic-execution","fuzz-testing","fuzzing","hybrid-fuzzing","libfuzzer","oss-fuzz","security","stability","sydr","sydr-fuzz","symbolic","symbolic-execution","vulnerabilities"],"created_at":"2024-11-24T17:19:12.999Z","updated_at":"2025-04-10T23:41:57.173Z","avatar_url":"https://github.com/ispras.png","language":"C","funding_links":[],"categories":["Tools"],"sub_categories":["Misc"],"readme":"# OSS-Sydr-Fuzz: Hybrid Fuzzing for Open Source Software\n\nThis repository is a fork of [OSS-Fuzz](https://github.com/google/oss-fuzz)\nproject. OSS-Sydr-Fuzz contains open source software targets for sydr-fuzz that\ncombines fuzzing ([libFuzzer](https://www.llvm.org/docs/LibFuzzer.html), [AFL++](https://github.com/AFLplusplus/AFLplusplus)) with\nthe power of dynamic symbolic execution\n([Sydr](https://sydr-fuzz.github.io)).\n\n## Project Structure\n\nEach open source target project provides:\n\n* Fuzz target for libFuzzer\n* Fuzz target for AFL++\n* Fuzz target for Sydr\n* Target built with llvm-cov\n* Build script\n* Dictionary\n* Initial seed corpus\n* Dockerfile that installs dependencies, builds targets, creates initial corpus,\n  etc.\n* Hybrid fuzzing configuration file for sydr-fuzz\n* Instructions to start hybrid fuzzing\n\nNOTE: Some listed above files may not be present or can be gathered from\nexternal repositories.\n\n## Supported Open Source Projects\n\nSupported projects are located [here](projects). In addition to C/C++ projects Sydr-Fuzz currently supports:\n* Rust: capstone-rs, image-rs, goblin, libhtp-rs, vector-rs, rust-regex, serde-json, gdb-command;\n* Go: image-go;\n* Python: crunch, h5py, msgspec, pillow, pytorch-py, ruamel-yaml, tensorflow-py, ultrajson, langchain;\n* Java: hsqldb, json-sanitizer, java-diff-utils, gson, fuzzywuzzy, joda-time, janino;\n* JavaScript: fast-xml-parser, node-xml2js;\n* С#: yamldotnet, cppsharp;\n* Lua: xml2lua.\n\n## Contributing\n\nFeel free to support new fuzz targets. The workflow is following:\n\n1. Compose targets for libFuzzer and Sydr.\n2. Prepare build script.\n3. Build Dockerfile with all targets.\n4. Provide sydr-fuzz configuration files.\n5. Write README with commands to run fuzzing.\n\n## Trophies\n\nThe list of discovered bugs can be found [here](TROPHIES.md).\n\n## Cite Us\n\n### Sydr-Fuzz: Continuous Hybrid Fuzzing and Dynamic Analysis for Security Development Lifecycle \\[[paper](https://arxiv.org/abs/2211.11595)\\] \\[[demo](https://vishnya.xyz/vishnyakov-isprasopen2022.webm)\\] \\[[slides](https://vishnya.xyz/vishnyakov-isprasopen2022.pdf)\\]\n\nVishnyakov A., Kuts D., Logunova V., Parygina D., Kobrin E., Savidov G., Fedotov A. Sydr-Fuzz: Continuous Hybrid Fuzzing and Dynamic Analysis for Security Development Lifecycle. 2022 Ivannikov ISPRAS Open Conference (ISPRAS), IEEE, 2022, pp. 111-123. DOI: [10.1109/ISPRAS57371.2022.10076861](https://www.doi.org/10.1109/ISPRAS57371.2022.10076861)\n\n```\n@inproceedings{vishnyakov22-sydr-fuzz,\n  title = {{{Sydr-Fuzz}}: Continuous Hybrid Fuzzing and Dynamic Analysis for\n           Security Development Lifecycle},\n  author = {Vishnyakov, Alexey and Kuts, Daniil and Logunova, Vlada and\n            Parygina, Darya and Kobrin, Eli and Savidov, Georgy and Fedotov,\n            Andrey},\n  booktitle = {2022 Ivannikov ISPRAS Open Conference (ISPRAS)},\n  pages = {111--123},\n  year = {2022},\n  publisher = {IEEE},\n  doi = {10.1109/ISPRAS57371.2022.10076861},\n}\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fispras%2Foss-sydr-fuzz","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fispras%2Foss-sydr-fuzz","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fispras%2Foss-sydr-fuzz/lists"}