{"id":16872318,"url":"https://github.com/mtrnord/matrix-fuzz","last_synced_at":"2025-09-05T03:33:11.279Z","repository":{"id":79292440,"uuid":"524024542","full_name":"MTRNord/matrix-fuzz","owner":"MTRNord","description":null,"archived":false,"fork":false,"pushed_at":"2023-10-07T17:33:52.000Z","size":148,"stargazers_count":0,"open_issues_count":5,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-02-10T22:45:29.571Z","etag":null,"topics":["fuzzing","http-fuzzer","matrix","matrix-fuzzer","matrix-library","matrix-protocol","matrix-testing","synapse"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/MTRNord.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-08-12T09:13:15.000Z","updated_at":"2022-08-12T16:31:02.000Z","dependencies_parsed_at":null,"dependency_job_id":"fc6ef193-8745-4de5-89a9-3af5def9bf96","html_url":"https://github.com/MTRNord/matrix-fuzz","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MTRNord%2Fmatrix-fuzz","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MTRNord%2Fmatrix-fuzz/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MTRNord%2Fmatrix-fuzz/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MTRNord%2Fmatrix-fuzz/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/MTRNord","download_url":"https://codeload.github.com/MTRNord/matrix-fuzz/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247332524,"owners_count":20921852,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["fuzzing","http-fuzzer","matrix","matrix-fuzzer","matrix-library","matrix-protocol","matrix-testing","synapse"],"created_at":"2024-10-13T15:14:23.404Z","updated_at":"2025-04-05T11:42:37.710Z","avatar_url":"https://github.com/MTRNord.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Matrix Fuzzing\r\n\r\nMatrix fuzzing is a dumb fuzzer fuzzing a few matrix endpoints. It requires a HS and a user to exist.\r\n\r\n# Project room\r\n\r\n[#matrix-fuzz:midnightthoughts.space](https://matrix.to/#/#matrix-fuzz:midnightthoughts.space)\r\n\r\n# Current targets\r\n\r\n- `/_matrix/client/v3/createRoom` - `tests::tests::fuzz_create_room` - `createRoom`\r\n\r\n# Usage of fuzzcheck-rs\r\n\r\n1. Create a HS\r\n2. Setup a user\r\n3. Set `MATRIX_USERNAME` and `MATRIX_PASSWORD` to the username and password of the user you want to fuzz as.\r\n4. Install fuzzcheck -\u003e https://github.com/loiclec/fuzzcheck-rs#setup\r\n5. Run `cargo fuzzcheck \u003ctarget\u003e`\r\n6. Wait until it crashes\r\n7. Verify the error by trying the output json yourself\r\n8. Please make sure to follow https://matrix.org/security-disclosure-policy/ for found errors instead of posting them in public unless you are 100% sure they are not a security issue. If you are in doubt prefer the security disclosure policy.\r\n\r\n# Usage of afl.rs\r\n\r\n1. Create a HS\r\n1. Setup a user\r\n2. Install afl.rs -\u003e `cargo install afl`\r\n3. Run `cargo afl build`\r\n4. Set `MATRIX_USERNAME` and `MATRIX_PASSWORD` to the username and password of the user you want to fuzz as.\r\n5. Run `cargo afl fuzz -i ./afl/\u003ctarget\u003e/in -o ./afl/\u003ctarget\u003e/out ./target/debug/\u003ctarget\u003e`\r\n6. Wait until it crashes\r\n7. Verification is a little harder. See https://github.com/rust-fuzz/afl.rs/issues/215 on how to reproduce things\r\n8. Please make sure to follow https://matrix.org/security-disclosure-policy/ for found errors instead of posting them in public unless you are 100% sure they are not a security issue. If you are in doubt prefer the security disclosure policy.\r\n\r\n# Hall of Explosions (Bugs found)\r\n\r\n- https://github.com/matrix-org/synapse/issues/13510\r\n- https://github.com/matrix-org/synapse/issues/13511\r\n- https://github.com/matrix-org/synapse/issues/13512\r\n- https://github.com/matrix-org/synapse/issues/13664\r\n\r\n# Known bugs in the fuzzer\r\n\r\nThe fuzzer generates arbitrary json objects currently very poorly. Resulting in a lot less cases than it should. Its a workaround for now until there is a nicer way.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmtrnord%2Fmatrix-fuzz","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmtrnord%2Fmatrix-fuzz","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmtrnord%2Fmatrix-fuzz/lists"}