awesome-fuzzing
A curated list of awesome Fuzzing(or Fuzz Testing) for software security
https://github.com/cpuu/awesome-fuzzing
Last synced: 8 days ago
JSON representation
Books
- The Fuzzing Book
- The Art, Science, and Engineering of Fuzzing: A Survey - Actually, this document is a paper, but it contains more important and essential content than any other book.
- Fuzzing-101
- Fuzzing: Brute Force Vulnerability Discovery, 1st Edition
- Fuzzing for Software Security Testing and Quality Assurance, 2nd Edition
- Open Source Fuzzing Tools, 1st Edition
- Fuzzing Against the Machine: Automate vulnerability research with emulated IoT devices on QEMU
Papers
ACM Conference on Computer and Communications Security (ACM CCS)
- SpecDoctor: Differential Fuzz Testing to Find Transient Execution Vulnerabilities, 2022
- SFuzz: Slice-based Fuzzing for Real-Time Operating Systems, 2022
- LibAFL: A Framework to Build Modular and Reusable Fuzzers, 2022
- JIT-Picking: Differential Fuzzing of JavaScript Engines, 2022
- DriveFuzz: Discovering Autonomous Driving Bugs through Driving Quality-Guided Fuzzing, 2022
- T-Reqs: HTTP Request Smuggling with Differential Fuzzing, 2021
- V-SHUTTLE: Scalable and Semantics-Aware Hypervisor Fuzzing, 2021
- Same Coverage, Less Bloat: Accelerating Binary-only Fuzzing with Coverage-preserving Coverage-guided Tracing, 2021
- Regression Greybox Fuzzing, 2021
- Hardware Support to Improve Fuzzing Performance and Precision, 2021
- FREEDOM: Engineering a State-of-the-Art DOM Fuzzer, 2020
- Learning to Fuzz from Symbolic Execution with Application to Smart Contracts, 2019
- Matryoshka: fuzzing deeply nested branches, 2019
- Evaluating Fuzz Testing, 2018
- Hawkeye: Towards a Desired Directed Grey-box Fuzzer, 2018
- DIFUZE: Interface Aware Fuzzing for Kernel Drivers, 2017
- Systematic Fuzzing and Testing of TLS Libraries, 2016
- Coverage-based Greybox Fuzzing as Markov Chain, 2016
- eFuzz: A Fuzzer for DLMS/COSEM Electricity Meters, 2016
- Scheduling Black-box Mutational Fuzzing, 2013
- Taming compiler fuzzers, 2013
- Designing New Operating Primitives to Improve Fuzzing Performance, 2017
- SoFi: Reflection-Augmented Fuzzing for JavaScript Engines, 2021
- Intriguer: Field-Level Constraint Solving for Hybrid Fuzzing, 2019
- AFL-based Fuzzing for Java with Kelinci, 2017
- Directed Greybox Fuzzing, 2017
- SAGE: whitebox fuzzing for security testing, 2012
- Grammar-based whitebox fuzzing, 2008
- Taint-based directed whitebox fuzzing, 2009
- SNIPUZZ: Black-box Fuzzing of IoT Firmware via Message Snippet Inference, 2021
- SlowFuzz: Automated Domain-Independent Detection of Algorithmic Complexity Vulnerabilities, 2017
- MC^2: Rigorous and Efficient Directed Greybox Fuzzing, 2022
- SemFuzz: Semantics-based Automatic Generation of Proof-of-Concept Exploits, 2017
- A Qualitative Analysis of Fuzzer Usability and Challenges, 2025
- ConTest: Taming the Cyber-physical Input Space in Fuzz Testing with Control Theory, 2025
- DiveFuzz: Enhancing CPU Fuzzing via Diverse Instruction Construction, 2025
- Error Messages to Fuzzing: Detecting XPS Parsing Vulnerabilities in Windows Printing Components, 2025
- Fuzzing Processing Pipelines for Zero-Knowledge Circuits, 2025
- Intent-aware Fuzzing for Android Hardened Application, 2025
- PromeFuzz: A Knowledge-Driven Approach to Fuzzing Harness Generation with Large Language Models, 2025
- Protocol-Aware Firmware Rehosting for Effective Fuzzing of Embedded Network Stacks, 2025
- RVISmith: Fuzzing Compilers for RVV Intrinsics, 2025
- SyzParam: Incorporating Runtime Parameters into Kernel Driver Fuzzing, 2025
- SyzSpec: Specification Generation for Linux Kernel Fuzzing via Under-Constrained Symbolic Execution, 2025
- Collapse Like A House of Cards: Hacking Building Automation System Through Fuzzing, 2024
- CountDown: Refcount-guided Fuzzing for Exposing Temporal Memory Errors in Linux Kernel, 2024
- CrossFire: Fuzzing macOS Cross-XPU Memory on Apple Silicon, 2024
- DarthShader: Fuzzing WebGPU Shader Translators & Compilers, 2024
- FOX: Coverage-guided Fuzzing as Online Stochastic Control, 2024
- Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust Fuzzing, 2024
- FuzzCache: Optimizing Web Application Fuzzing Through Software-Based Data Cache, 2024
- Fuzzing JavaScript Engines with a Graph-based IR, 2024
- Leveraging Binary Coverage for Effective Generation Guidance in Kernel Fuzzing, 2024
- LIFTFUZZ: Validating Binary Lifters through Context-aware Fuzzing with GPT, 2024
- No Peer, no Cry: Network Application Fuzzing via Fault Injection, 2024
- On Understanding and Forecasting Fuzzers Performance with Static Analysis, 2024
- OSmart: Whitebox Program Option Fuzzing, 2024
- Program Environment Fuzzing, 2024
- Prompt Fuzzing for Fuzz Driver Generation, 2024
- ProphetFuzz: Fully Automated Prediction and Fuzzing of High-Risk Option Combinations with Only Documentation via Large Language Model, 2024
- RANsacked: A Domain-Informed Approach for Fuzzing LTE and 5G RAN-Core Interfaces, 2024
- RIoTFuzzer: Companion App Assisted Remote Fuzzing for Detecting Vulnerabilities in IoT Devices, 2024
- Toss a Fault to BpfChecker: Revealing Implementation Flaws for eBPF runtimes with Differential Fuzzing, 2024
- DSFuzz: Detecting Deep State Bugs with Dependent State Exploration, 2023
- Fuzz on the Beach: Fuzzing Solana Smart Contracts, 2023
- Greybox Fuzzing of Distributed Systems, 2023
- Hopper: Interpretative Fuzzing for Libraries, 2023
- Lifting Network Protocol Implementation to Precise Format Specification with Security Applications, 2023
- NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic, 2023
- Profile-guided System Optimizations for Accelerated Greybox Fuzzing, 2023
- PyRTFuzz: Detecting Bugs in Python Runtimes via Two-Level Collaborative Fuzzing, 2023
- SyzDirect: Directed Greybox Fuzzing for Linux Kernel, 2023
- HyperFuzzer: An Efficient Hybrid Fuzzer For Virtual CPUs, 2021
ArXiv (Fuzzing with Artificial Intelligence & Machine Learning)
- MEUZZ: Smart Seed Scheduling for Hybrid Fuzzing, 2020
- A Review of Machine Learning Applications in Fuzzing, 2019
- Evolutionary Fuzzing of Android OS Vendor System Services, 2019
- MoonLight: Effective Fuzzing with Near-Optimal Corpus Distillation, 2019
- Coverage-Guided Fuzzing for Deep Neural Networks, 2018
- DLFuzz: Differential Fuzzing Testing of Deep Learning Systems, 2018
- TensorFuzz: Debugging Neural Networks with Coverage-Guided Fuzzing, 2018
- NEUZZ: Efficient Fuzzing with Neural Program Learning, 2018
- EnFuzz: From Ensemble Learning to Ensemble Fuzzing, 2018
- REST-ler: Automatic Intelligent REST API Fuzzing, 2018
- Deep Reinforcement Fuzzing, 2018
- Not all bytes are equal: Neural byte sieve for fuzzing, 2017
- Faster Fuzzing: Reinitialization with Deep Neural Models, 2017
- Learn&Fuzz: Machine Learning for Input Fuzzing, 2017
- Complementing Model Learning with Mutation-Based Fuzzing, 2016
IEEE Symposium on Security and Privacy (IEEE S&P)
- PATA: Fuzzing with Path Aware Taint Analysis, 2022
- Jigsaw: Efficient and Scalable Path Constraints Fuzzing, 2022
- FuzzUSB: Hybrid Stateful Fuzzing of USB Gadget Stacks, 2022
- BEACON : Directed Grey-Box Fuzzing with Provable Path Pruning, 2022
- STOCHFUZZ: Sound and Cost-effective Fuzzing of Stripped Binaries by Incremental and Stochastic Rewriting, 2021
- One Engine to Fuzz 'em All: Generic Language Processor Testing with Semantic Validation, 2021
- NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis, 2021
- DIFUZZRTL: Differential Fuzz Testing to Find CPU Bugs, 2021
- DIANE: Identifying Fuzzing Triggers in Apps to Generate Under-constrained Inputs for IoT Devices, 2021
- Fuzzing JavaScript Engines with Aspect-preserving Mutation, 2020
- IJON: Exploring Deep State Spaces via Fuzzing, 2020
- Krace: Data Race Fuzzing for Kernel File Systems, 2020
- Pangolin:Incremental Hybrid Fuzzing with Polyhedral Path Abstraction, 2020
- RetroWrite: Statically Instrumenting COTS Binaries for Fuzzing and Sanitization, 2020
- T-Fuzz: fuzzing by program transformation, 2018
- Skyfire: Data-Driven Seed Generation for Fuzzing, 2017
- Program-Adaptive Mutational Fuzzing, 2015
- TaintScope: A checksum-aware directed fuzzing tool for automatic software vulnerability detection, 2010
- CollAFL: Path Sensitive Fuzzing, 2018
- Effective Seed Scheduling for Fuzzing with Graph Centrality Analysis, 2022
- CHIMERA: Fuzzing P4 Network Infrastructure for Multi-Plane Bug Detection and Vulnerability Discovery, 2025
- FirmRCA: Towards Post-Fuzzing Analysis on ARM Embedded Firmware with Efficient Event-based Fault Localization, 2025
- Fuzz-Testing Meets LLM-Based Agents: An Automated and Efficient Framework for Jailbreaking Text-To-Image Generation Models, 2025
- HouseFuzz: Service-Aware Grey-Box Fuzzing for Vulnerability Detection in Linux-Based Firmware, 2025
- Predator: Directed Web Application Fuzzing for Efficient Vulnerability Validation, 2025
- RGFuzz: Rule-Guided Fuzzer for WebAssembly Runtimes, 2025
- Stateful Analysis and Fuzzing of Commercial Baseband Firmware, 2025
- AFGen: Whole-Function Fuzzing for Applications and Libraries, 2024
- Chronos: Finding Timeout Bugs in Practical Distributed Systems by Deep-Priority Fuzzing with Transient Delay, 2024
- DY Fuzzing: Formal Dolev-Yao Models Meet Cryptographic Protocol Fuzz Testing, 2024
- Everything is Good for Something: Counterexample-Guided Directed Fuzzing via Likely Invariant Inference, 2024
- LABRADOR: Response Guided Directed Fuzzing for Black-box IoT Devices, 2024
- LLMIF: Augmented Large Language Model for Fuzzing IoT Devices, 2024
- Predecessor-aware Directed Greybox Fuzzing, 2024
- SATURN: Host-Gadget Synergistic USB Driver Fuzzing, 2024
- SoK: Prudent Evaluation Practices for Fuzzing, 2024
- SyzGen++: Dependency Inference for Augmenting Kernel Driver Fuzzing, 2024
- SyzTrust: State-aware Fuzzing on Trusted OS Designed for IoT Devices, 2024
- Titan: Efficient Multi-target Directed Greybox Fuzzing, 2024
- To Boldly Go Where No Fuzzer Has Gone Before: Finding Bugs in Linux' Wireless Stacks through VirtIO Devices, 2024
- Towards Smart Contract Fuzzing on GPU, 2024
- TEEzz: Fuzzing Trusted Applications on COTS Android Devices, 2023
- SEGFUZZ: Segmentizing Thread Interleaving to Discover Kernel Concurrency Bugs through Fuzzing, 2023
- RSFuzzer: Discovering Deep SMI Handler Vulnerabilities in UEFI Firmware with Hybrid Fuzzing, 2023
- Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities, 2023
- UTOPIA: Automatic Generation of Fuzz Driver using Unit Tests, 2023
- SelectFuzz: Efficient Directed Fuzzing with Selective Path Exploration, 2023
- Finding Specification Blind Spots via Fuzz Testing, 2023
- ODDFUZZ: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing, 2023
- VIDEZZO: Dependency-aware Virtual Device Fuzzing, 2023
- DEVFUZZ: Automatic Device Model-Guided Device Driver Fuzzing, 2023
- Angora: Efficient Fuzzing by Principled Search, 2018
- Batch Me If You Can: Coverage-guided RPKI Fuzzing at Scale, 2026
- Camveil: Unveiling Security Camera Vulnerabilities through Multi-Protocol Coordinated Fuzzing, 2026
- deepSURF: Detecting Memory Safety Vulnerabilities in Rust Through Fuzzing LLM-Augmented Harnesses, 2026
- Fizzle: A Framework for Deterministic and Reproducible Network Fuzzing, 2026
- Fuzzing the Physical Space: Physics-Aware Testing of Black-Box Industrial Control Systems, 2026
- Jazzer: Coverage-Guided Fuzzing for Semantic Vulnerabilities in the Java Ecosystem, 2026
- PILOT: Command-line Interface Fuzzing via Path-Guided, Iterative Large Language Model Prompting, 2026
- SmuFuzz: Enable Deep System Management Mode Fuzzing in Fully Featured UEFI Runtime Environment, 2026
- Specializing Language Models for Textual Fuzzing via Reinforcement Learning, 2026
- StepStone: LLM-Based GPU Kernel Driver Fuzzing via User-Space Libraries, 2026
- Stop Starving or Stuffing Me: Boosting Firmware Fuzzing Efficiency with On-demand Input Delivery, 2026
- TrigFuzz: Triggering Conditions Guided Directed Fuzzing, 2026
- Web Application Vulnerability Repair via Context-Aware Fault Localization and Directed Differential Fuzzing, 2026
- zkFuzz: Foundation and Framework for Effective Fuzzing of Zero-Knowledge Circuits, 2026
The Network and Distributed System Security Symposium (NDSS)
- Semantic-Informed Driver Fuzzing Without Both the Hardware Devices and the Emulators, 2022
- MobFuzz: Adaptive Multi-objective Optimization in Gray-box Fuzzing, 2022
- Context-Sensitive and Directional Concurrency Fuzzing for Data-Race Detection, 2022
- EMS: History-Driven Mutation for Coverage-based Fuzzing, 2022
- WINNIE : Fuzzing Windows Applications with Harness Synthesis and Fast Cloning, 2021
- Reinforcement Learning-based Hierarchical Seed Scheduling for Greybox Fuzzing, 2021
- PGFUZZ: Policy-Guided Fuzzing for Robotic Vehicles, 2021
- Favocado: Fuzzing Binding Code of JavaScript Engines Using Semantically Correct Test Cases, 2021
- HFL: Hybrid Fuzzing on the Linux Kernel, 2020
- HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing, 2020
- HYPER-CUBE: High-Dimensional Hypervisor Fuzzing, 2020
- Not All Coverage Measurements Are Equal: Fuzzing by Coverage Accounting for Input Prioritization, 2020
- CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines, 2019
- PeriScope: An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary, 2019
- REDQUEEN: Fuzzing with Input-to-State Correspondence, 2019
- Send Hardest Problems My Way: Probabilistic Path Prioritization for Hybrid Fuzzing, 2019
- Life after Speech Recognition: Fuzzing Semantic Misinterpretation for Voice Assistant Applications, 2019
- INSTRIM: Lightweight Instrumentation for Coverage-guided Fuzzing, 2018
- IoTFuzzer: Discovering Memory Corruptions in IoT Through App-based Fuzzing, 2018
- Enhancing Memory Error Detection for Large-Scale Applications and Fuzz Testing, 2018
- Vuzzer: Application-aware evolutionary fuzzing, 2017
- DELTA: A Security Assessment Framework for Software-Defined Networks, 2017
- Driller: Augmenting Fuzzing Through Selective Symbolic Execution, 2016
- Automated Whitebox Fuzz Testing, 2008
- Automatic Library Fuzzing through API Relation Evolvement, 2025
- Blackbox Fuzzing of Distributed Systems with Multi-Dimensional Inputs and Symmetry-Based Feedback Pruning, 2025
- DUMPLING: Fine-grained Differential JavaScript Engine Fuzzing, 2025
- FUZZUER: Enabling Fuzzing of UEFI Interfaces on EDK-2, 2025
- ICSQuartz: Scan Cycle-Aware and Vendor-Agnostic Fuzzing for Industrial Control Systems, 2025
- MALintent: Coverage Guided Intent Fuzzing Framework for Android, 2025
- Moneta: Ex-Vivo GPU Driver Fuzzing by Recalling In-Vivo Execution States, 2025
- MSan: Efficiently Detecting Uninitialized Memory Errors During Fuzzing, 2025
- Truman: Constructing Device Behavior Models from OS Drivers to Fuzz Virtual Devices, 2025
- TWINFUZZ: Differential Testing of Video Hardware Acceleration Stacks, 2025
- DeepGo: Predictive Directed Greybox Fuzzing, 2024
- EnclaveFuzz: Finding Vulnerabilities in SGX Applications, 2024
- Large Language Model guided Protocol Fuzzing, 2024
- MOCK: Optimizing Kernel Fuzzing Mutation with Context-aware Dependency, 2024
- Predictive Context-sensitive Fuzzing, 2024