Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/alphaSeclab/fuzzing-stuff
Resources About Fuzzing, For Multiple Platforms And All Popular Fuzzers. 500+ Open Source Tools Sorted By Star Count, 800+ Blog Posts Sorted By Publish Time.
https://github.com/alphaSeclab/fuzzing-stuff
afl american-fuzzy-lop fuzzing go-fuzz libfuzzer oss-fuzz peach syzkaller winafl
Last synced: about 1 month ago
JSON representation
Resources About Fuzzing, For Multiple Platforms And All Popular Fuzzers. 500+ Open Source Tools Sorted By Star Count, 800+ Blog Posts Sorted By Publish Time.
- Host: GitHub
- URL: https://github.com/alphaSeclab/fuzzing-stuff
- Owner: alphaSeclab
- Created: 2020-02-05T04:04:36.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2020-02-05T04:26:25.000Z (over 4 years ago)
- Last Synced: 2024-04-24T13:40:20.759Z (5 months ago)
- Topics: afl, american-fuzzy-lop, fuzzing, go-fuzz, libfuzzer, oss-fuzz, peach, syzkaller, winafl
- Size: 122 KB
- Stars: 231
- Watchers: 12
- Forks: 66
- Open Issues: 0
-
Metadata Files:
- Readme: Readme.md
- Changelog: history/Fuzzing_20200205121327.json
Awesome Lists containing this project
- awesome-hacking-lists - alphaSeclab/fuzzing-stuff - Resources About Fuzzing, For Multiple Platforms And All Popular Fuzzers. 500+ Open Source Tools Sorted By Star Count, 800+ Blog Posts Sorted By Publish Time. (Others)
README
# 所有收集类项目:
- [收集的所有开源工具: sec-tool-list](https://github.com/alphaSeclab/sec-tool-list): 超过21K, 包括Markdown和Json两种格式
- [安全资源收集类的 Repo](https://github.com/alphaSeclab/awesome-security-collection): 1000+各类安全资源收集的Github Repo
- [全平台逆向资源](https://github.com/alphaSeclab/awesome-reverse-engineering):
- Windows平台安全: PE/DLL/DLL-Injection/Dll-Hijack/Dll-Load/UAC-Bypass/Sysmon/AppLocker/ETW/WSL/.NET/Process-Injection/Code-Injection/DEP/Kernel/...
- Linux安全: ELF/...
- macOS/iXxx安全: Mach-O/越狱/LLDB/XCode/...
- Android安全: HotFix/XPosed/Pack/Unpack/Emulator/Obfuscate
- 知名工具: IDA/Ghidra/x64dbg/OllDbg/WinDBG/CuckooSandbox/Radare2/BinaryNinja/DynamoRIO/IntelPin/Frida/QEMU/...
- [攻击性网络安全资源](https://github.com/alphaSeclab/awesome-cyber-security): 漏洞/渗透/物联网安全/数据渗透/Metasploit/BurpSuite/KaliLinux/C&C/OWASP/免杀/CobaltStrike/侦查/OSINT/社工/密码/凭证/威胁狩猎/Payload/WifiHacking/无线攻击/后渗透/提权/UAC绕过/...
- [网络相关的安全资源](https://github.com/alphaSeclab/awesome-network-stuff):
- 网络通信: 代理/SS/V2ray/GFW/反向代理/隧道/VPN/Tor/I2P/...
- 网络攻击: 中间人/PortKnocking/...
- 网络分析: 嗅探/协议分析/网络可视化/网络分析/网络诊断等
- [开源远控和恶意远控分析报告](https://github.com/alphaSeclab/awesome-rat): 开源远控工具: Windows/Linux/macOS/Android; 远控类恶意恶意代码的分析报告等
- [Webshell工具和分析/使用文章](https://github.com/alphaSeclab/awesome-webshell): Webshell资源收集, 包括150个Github项目, 200个左右文章
- [取证相关工具和文章](https://github.com/alphaSeclab/awesome-forensics): 近300个取开源取证工具，近600与取证相关文章
- [蜜罐资源](https://github.com/alphaSeclab/awesome-honeypot): 250+个开源蜜罐工具，350+与蜜罐相关文章
- [Burp Suite资源](https://github.com/alphaSeclab/awesome-burp-suite): 400+个开源Burp插件，500+与Burp相关文章
# Fuzzing
- 500+开源工具, 800+博客/论文/视频
- [English Version](https://github.com/alphaSeclab/fuzzing-stuff/blob/master/Readme_en.md)
# 目录
- [平台](#ba225775cc84ad50fc4eef4d9f59a810)
- [Windows](#c0b0c2ea9d7e132704d6a373ec0777f2)
- [(15) 文章](#5827dec9f50e5dd3a22a0acf98b93601)
- [Hyper-V](#83c2230545ef765defbad18446f0a8ce)
- [(2) 文章](#13c876bf34c480ff6cf7dbccaca8ce7b)
- [(1) 工具](#0e21d0d0d09c796d23811aab292fad67)
- [(13) 工具](#9e08b20923c330a8129650bbfff224f3)
- [Linux](#9fb70c8fe99b931fdcc0006b2981b317)
- [(6) 文章](#2298f6a5e7ae3ff71e2b3c407d545f0c)
- [(7) 工具](#bb02040fd55d07f271449793a7f61ac2)
- [VxWorks](#6b2573e715a5a651f0ec62a2c89b660b)
- [(1) 文章](#317ac322ac612651b1ecc5ddd1899107)
- [(1) 工具](#9e5b500ce6bb27da33eb3aab93550b5b)
- [Android](#9d6db0bef350ff9f284d0bec37511ab1)
- [(6) 文章](#f2cb8c9e654af38c2e5946cba02f84a9)
- [(12) 工具](#ca622cf735ca150150e8e46565e90c58)
- [iOS](#7da821872d137c4c215ae35a9f9a4349)
- [(1) 文章](#d9ef9fde4a2d6413a60a7e2d26dbac14)
- [(1) 工具](#8fc7535b23166bb9d9f9881428d3c319)
- [目标](#4ff70d7465fc1de6cdcc6dec1cbac3f8)
- [USB](#a9fb6e5bf109505b2e461340cf6d0562)
- [(5) 文章](#a009f059f53af5c35246ba124f95aca9)
- [(3) 工具](#3ccffbab722006e35b25e2ffd27a8339)
- [Web](#5cba1f60ec6f71801c2e35583b3860f7)
- [(19) 文章](#050025833cd7923a727168ef605dac7d)
- [XSS](#7316e86a76039b69d55ce75b7ad63806)
- [(4) 文章](#03b47f7b0ab73a892d7f71250d80cd8a)
- [(8) 工具](#f63b395f03487b306c1c3a8244495d60)
- [(23) 工具](#0d57aabd24f957b8aa1d0c7f0b56a9a5)
- [内核](#efc729aa785c9ba06d8d163205935a39)
- [(12) 文章](#1c2e42bde10e3f4be917db4e5edca877)
- [(7) 工具](#1b600d6d9e33544805ef6e099b89f7d2)
- [浏览器](#8e9bef8a7336c337158f90ca6ac15b8e)
- [(8) 文章](#0ad896e0889f3bb09a491fe52e7a2ab4)
- [(5) 工具](#ce8c3714cbad149ea5db73a949bc5632)
- [网络](#de288219de0676bd92c9303215697f73)
- [(17) 工具](#7453e83782a870110746d730a42c88e5)
- [(6) 文章](#06d21501e9332b551af531192ad96d6f)
- [Burp](#5db847ee269963713f3a574d2d932396)
- [(6) 文章](#d0e176218f3a4b67a7c4767bca2a57e8)
- [(6) 工具](#c36d071cfd6f87b102a9ef787818a7d1)
- [(8) PDF](#e77277da6ff91d966434eb0c5b49466d)
- [JavaScript](#6bfd82396cd4c2b8929ca869ee55afb1)
- [(3) 工具](#11f9a34b3d37bb13b3ad132fd1793519)
- [(1) 文章](#3cce3934ff6d602ecefec2d5d2d1b2fd)
- [知名工具](#a49064798ee98ed78bcc8245fa31c64e)
- [AFL](#0c6931f6f85194e565b9bde78e6f4215)
- [(73) 工具](#af55f665958eecd825d0df60530136c7)
- [(95) 文章](#ae52cd288fac548da8d68f12b4c1119d)
- [WinAFL](#1c4df8f0641212cc5a71f96cecc6f9bc)
- [(12) 文章](#54356b3ce4f269eb64c571e298578687)
- [(4) 工具](#97bc87c4d52312cedc91174a8cd12823)
- [TriforceAFL](#65a56cd4b5506ce13a9fefe65897a88c)
- [(1) 文章](#d2c59341002e8d11cd3b5efcd746a892)
- [(3) 工具](#b5fa40e7d958b66b8a8f5360320c4fd9)
- [KAFL](#98831fe112590c5febd3f691e40d5627)
- [(1) 工具](#fe3fa44f4d30c7e5d9a0f5dbcc95b50d)
- [aflsmart](#cdd51078ff8a8fe247f92a612b7449d9)
- [(1) 工具](#bcbb6ae500594351d57c514082025552)
- [(1) 文章](#4fc6a8af588e9b6579281fb4805bc118)
- [libFuzzer](#de5d9138d9dce28fd3d025e1056b6c86)
- [(9) 工具](#44b9d8dc765b278b3d4be21d9d507680)
- [(11) 文章](#c7656aa5e7a10d611b6739057f0e1881)
- [dharma](#308ce75dc1d55114297e084f4424bb2d)
- [(2) 文章](#7ad0646f60d2a4652f1c52af6d44ef08)
- [(1) 工具](#ffadd4bc8e9d8ae7e8311e0ee0becf87)
- [Peach](#ffc1a2418120b476722fed832eb75dff)
- [(19) 文章](#f7a676b24ac65ae2323ef6750c415297)
- [(10) 工具](#8466b2f76463c972468c7e97f14501c2)
- [SPIKE](#cbb96ed45688b2581907a23dd394db7c)
- [(1) 工具](#c5e80e579dc72654af10e5661929b167)
- [(6) 文章](#766f709efaf0c5ba7c38213ee0a08afc)
- [driller](#68c2a6dcaa033aceb5d880a4e0b308ab)
- [(3) 工具](#4bc64b41d4ac89e0f71ee08d0c06930e)
- [syzkaller](#04548bfdaea4001f268435cbcd3ea093)
- [(1) 工具](#da83685be3f757321634d041d4f7e513)
- [(9) 文章](#6636443aab5e2f4a99ef22996006b93f)
- [clusterfuzz](#5ec79a1e74f03bdceb82b1fe108e82df)
- [(1) 工具](#3699011f39726e5d3d9a8c4cd3174752)
- [(2) 文章](#670eb9f38c91ede5db0d7676e03c7114)
- [OSS-Fuzz](#0cb19ae8f141b5f6e23bd7c79742910f)
- [(2) 文章](#414c5025267c01a8eef9c83faa54e9e9)
- [(2) 工具](#4cd90c79274fe3e37a9142f4e727ab46)
- [IFuzzer](#8a98953e8576f2cbfa5068339aaa11ad)
- [(1) 工具](#9516c3382676bfd3275296e7b735be3c)
- [CodeAlchemist](#cc0fbdb7db655d96b71909a2f4c14d09)
- [(2) 文章](#a1c77c642c385403698f40eb9ca5692a)
- [(1) 工具](#cb65a2322a0581c5e97ab31fc94eb9e1)
- [HongFuzz](#7be26e50c44d7babcfd4284948efb061)
- [(2) 工具](#857adf50a5eaea808666bda19c6c5fa0)
- [(11) 文章](#19b38c3982d3e902644aee2d8995a2f3)
- [Echidna](#1a99ead5a63a5f571f2895e65ff37e61)
- [(3) 文章](#6d254ade422517d3a4d48fca8dc660ef)
- [(1) 工具](#176c89d084c705be8c6d716c32f12a10)
- [Applepie](#6afa1277e9e1d0f6fa55488d5b6ce501)
- [(1) 文章](#4e08db4877bbf92070d9de641f226740)
- [(1) 工具](#3f876230ca03e0f444002b3fb310e7c1)
- [autoPwn](#84437b546f221c882ef78fa9eac33c3a)
- [(9) 工具](#589e8e50cdfd74946630cd952c799a5b)
- [(14) 文章](#d7d8d51459a5e98b47cc1b46ae485b0c)
- [go-fuzz](#7ed3059b9b95401ebb581ced6b20ce78)
- [(5) 文章](#fe00ec503190f1552ce3e85adaf3f0fa)
- [(2) 工具](#74310510330283757ff0dfc6948f5487)
- [SSRFmap](#0adb8d197ce9e49ec5da8ef42ec7580a)
- [(1) 文章](#c4326c555dbb8928400fc0364c29b4c6)
- [(2) 工具](#83eb5422c52ada15e746c872f5ffca59)
- [Sulley](#1eb076271df09926466fd1fb2e3b004d)
- [(1) 工具](#8fba82dd4ba5636b03ab6ae8feaea1a6)
- [(14) 文章](#8fb4c745a2d560e99cf508b0afa518da)
- [boofuzz](#3ce9a2d3b55382fba52d41604084e699)
- [(1) 工具](#b6a22b7c530018cfb03e28267f7d0f85)
- [(5) 文章](#a7ce63d2493073625ee944b834637c8b)
- [radamsa](#df4787424734d30ae1a2770fb373b930)
- [(10) 工具](#383b3db53dbae5495384c773017e76ed)
- [(4) 文章](#ceecee8d74b99efb48bda136e569013e)
- [Ffuf](#14865c1f28cd4cb9fa3bd76a280773b8)
- [(1) 工具](#8080688602545fb21df7b94d7cc03c4d)
- [(1) 文章](#a2fe56d3431d30768eb1f81678899755)
- [domato](#009faf20510aa32978e4f9bfd7e8f783)
- [(1) 工具](#ee66a98483d7c3670134cfab28efa441)
- [(1) 文章](#3eae6ff368baff7ce0655da320b3ddfa)
- [fuzzdb](#c915525d68c37bcd0cf9e7d3f3b28612)
- [(5) 工具](#438c97e531560cb170319c89b14f520f)
- [(5) 文章](#b2777dfa36382f17dab0640e0cc14c2e)
- [fuzzbunch](#9c76284dd37297de7ac2e74e5124c4c5)
- [(7) 工具](#7e28d80bd3f4b1e8d7f77e56271f580c)
- [(7) 文章](#cf82fd581083a73dc4aef04130b72806)
- [angora](#4715c2d6616f674e9c549a41c1d960b5)
- [(2) 工具](#0b506c09d2c00f0fd4e44c0f73dc2bed)
- [(3) 文章](#b238f28621f2958d2012f93c20939233)
- [wfuzz](#1f6b4e55e6e2ddb624812c94f41f508e)
- [(1) 工具](#2bc6286bdc936ff8993074d5e4e90240)
- [(7) 文章](#8a56b77c824efbf96dc4d9166ccade52)
- [PBTK](#76a96bc0bc7d4ad75bd96ec45fc57061)
- [(1) 工具](#a934dde3f8a53608bea3da027475435b)
- [(1) 文章](#61d79ed579a652c6a046d9db2a31fc2e)
- [grinder](#1b88125a7791ce5ac6b3a69cf77aef75)
- [(3) 工具](#5f7c3589d245ce41c87ff3381a55521f)
- [(1) 文章](#8b18d1c20980b88f8c1c147ae7141694)
- [Sandsifter](#569ae685f78e229e0ad8a1bdea0b1628)
- [(2) 文章](#a5d3997cfb664cfd60150b93a1294a46)
- [(4) 工具](#35cd93300c1b3849b7a2cf3a83a8b88a)
- [deepstate](#56418ce9cb63cafe88b6b7ba4759bdfd)
- [(5) 工具](#15e760e35ddaa568a7e1adff4334c3a0)
- [(6) 文章](#37dd474873d4e77f787ed4eaf05b57e1)
- [trinity](#ffb074c5cd7a639bb9f09034767eb3c8)
- [(1) 工具](#fbf2c91ed5bb8406c47488ee47331e32)
- [(3) 文章](#1f7beeb4096d8297a4df1ca1c450b8d9)
- [netzob](#782cdd958b166587e6c7c28d57e96e5d)
- [(1) 工具](#655a6ac0c77ca87bbba0e6882c4a30fb)
- [(4) 文章](#d696cf1f780925e8454c756778214118)
- [其他](#fdd537da11bb7943b2e3db2948571897)
- [书籍](#bda60cdb74386781d08ef693acc5d197)
- [(1) 书籍](#5fbefeb903f1b8fa984a341c43e91154)
- [字典](#5b7b2258fd0aea44c7721f430fd21aad)
- [(7) 工具](#34f611fb294c95e4834c5e7fa976ba6d)
- [工具](#8fd129e1f5d59fd7dc1522149dbdff1a)
- [(13) 收集](#2f1bb61812cb93775b1520278d2c3c46)
- [(232) 新添加](#0c562526ea5a2b704151dc13c4dbb46f)
- [(2) 其他](#8a3d9375211195667479a3a48b6c5cd7)
- [文章](#5b50c08b05e01ce7d143e2a0bbe27a21)
- [(317) 新添加](#e98a165f5e333fd6d008b0a7bcb0010f)
- [(66) arxiv_cscr](#e8b7eb55f4826f577ba87fd6e51d891a)
- [(57) Youtube](#a8ddcfd649b14610b766c8ba8181d2d4)
***
- [**89**星][12m] [C++] [fsecurelabs/viridianfuzzer](https://github.com/FSecureLABS/ViridianFuzzer) Kernel driver to fuzz Hyper-V hypercalls
- 2019.02 [mwrinfosecurity] [Ventures into Hyper-V - Fuzzing hypercalls](https://labs.mwrinfosecurity.com/blog/ventures-into-hyper-v-part-1-fuzzing-hypercalls/)
- 2019.02 [f] [Ventures into Hyper-V - Fuzzing hypercalls](https://labs.f-secure.com/blog/ventures-into-hyper-v-part-1-fuzzing-hypercalls/)
- [**170**星][3m] [C++] [mxmssh/manul](https://github.com/mxmssh/manul) Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS
- [**160**星][10d] [C] [hfiref0x/ntcall64](https://github.com/hfiref0x/ntcall64) Windows NT x64 syscall fuzzer
- [**141**星][3y] [C] [koutto/ioctlbf](https://github.com/koutto/ioctlbf) Windows Kernel Drivers fuzzer
- [**101**星][2m] [C++] [trailofbits/sienna-locomotive](https://github.com/trailofbits/sienna-locomotive) A user-friendly fuzzing and crash triage tool for Windows
- [**96**星][2y] [Py] [sogeti-esec-lab/rpcforge](https://github.com/sogeti-esec-lab/rpcforge) Windows RPC Python fuzzer
- [**88**星][1y] [C++] [nccgroup/dibf](https://github.com/nccgroup/DIBF) Windows NT ioctl bruteforcer and modular fuzzer
- [**77**星][3y] [Py] [carlosgprado/brundlefuzz](https://github.com/carlosgprado/brundlefuzz) BrundleFuzz is a distributed fuzzer for Windows and Linux using dynamic binary instrumentation.
- [**63**星][1y] [C] [ioactive/fuzzndis](https://github.com/ioactive/fuzzndis) A Fuzzer for Windows NDIS Drivers OID Handlers
- [**50**星][6y] [Py] [debasishm89/iofuzz](https://github.com/debasishm89/iofuzz) A mutation based user mode (ring3) dumb in-memory Windows Kernel (IOCTL) Fuzzer/Logger. This script attach it self to any given process and hooks DeviceIoControl!Kernel32 API and try to log or fuzz all I/O Control code I/O Buffer pointer, I/O buffer length that process sends to any Kernel driver.
- [**48**星][7y] [C++] [cr4sh/msfontsfuzz](https://github.com/cr4sh/msfontsfuzz) OpenType font file format fuzzer for Windows
- [**47**星][3y] [silvermoonsecurity/security-misc](https://github.com/silvermoonsecurity/security-misc) # Full overview of current vulnerability, exploit , fuzz, mitigation of current major Operation System(Windows, macOS, Linux, Android,iOS and so forath) and popular applicaiton
- [**38**星][2y] [Py] [walkerfuz/pydbgeng](https://github.com/walkerfuz/PyDbgEng) a python wrapper of debug engines on windows, linux or osx, it's only aim to auto fuzzing.
- [**13**星][2y] [C] [leonwxqian/windows-defender-nscript-loader](https://github.com/leonwxqian/windows-defender-nscript-loader) A exe loader that can load NScript evaluation engine of Windows Defender/Microsft Security Essential. You can fuzz NScript by using this. Project was based on Tavis Ormandy(taviso)'s "Porting Windows Dynamic Link Libraries to Linux" (
- 2019.10 [apriorit] [Finding Vulnerabilities in Closed Source Windows Software by Applying Fuzzing](https://www.apriorit.com/dev-blog/640-qa-fuzzing-for-closed-source-windows-software)
- 2019.07 [4hou] [利用逆向分析与模糊测试技术深入考察Windows图形库漏洞](https://www.4hou.com/vulnerable/18889.html)
- 2019.06 [ixiacom] [Investigating Windows Graphics Vulnerabilities: A Reverse Engineering and Fuzzing Story](https://www.ixiacom.com/company/blog/investigating-windows-graphics-vulnerabilities-reverse-engineering-and-fuzzing-story)
- 2017.05 [pediy] [[翻译]Windows Uniscribe Fuzzing 笔记](https://bbs.pediy.com/thread-217331.htm)
- 2017.04 [googleprojectzero] [Notes on Windows Uniscribe Fuzzing](https://googleprojectzero.blogspot.com/2017/04/notes-on-windows-uniscribe-fuzzing.html)
- 2016.11 [360] [A year of Windows kernel font fuzzing](https://www.anquanke.com/post/id/84932/)
- 2016.11 [vexillium] [Slides about my Windows Metafile research (Ruxcon, PacSec) and fuzzing (Black Hat EU) now public](http://j00ru.vexillium.org/?p=2975)
- 2016.11 [vexillium] [Slides about my Windows Metafile research and fuzzing now public](https://j00ru.vexillium.org/2016/11/slides-about-my-windows-metafile-research-and-fuzzing-now-public/)
- 2016.10 [duo] [Remote Fuzzer Monitoring with Windows Error Reporting (WER)](https://duo.com/blog/remote-fuzzer-monitoring-with-windows-error-reporting-wer)
- 2016.07 [googleprojectzero] [A year of Windows kernel font fuzzing #2: the techniques](https://googleprojectzero.blogspot.com/2016/07/a-year-of-windows-kernel-font-fuzzing-2.html)
- 2016.06 [googleprojectzero] [A year of Windows kernel font fuzzing #1: the results](https://googleprojectzero.blogspot.com/2016/06/a-year-of-windows-kernel-font-fuzzing-1_27.html)
- 2014.05 [freebuf] [在渗透测试中使用fuzz技术(附windows安装指南)](http://www.freebuf.com/articles/network/34136.html)
- 2012.10 [securiteam] [Windows Device Driver Fuzzing](https://blogs.securiteam.com/index.php/archives/1914)
- 2012.05 [tekwizz123] [Set Up Your Windows XP for Fuzzing](http://tekwizz123.blogspot.com/2012/05/set-up-your-windows-xp-for-fuzzing.html)
- 2009.09 [microsoft] [Known issue: Using MiniFuzz on Windows XP or Server2003](https://cloudblogs.microsoft.com/microsoftsecure/2009/09/25/known-issue-using-minifuzz-on-windows-xp-or-server2003/)
***
- [**247**星][9m] [C++] [ucsb-seclab/difuze](https://github.com/ucsb-seclab/difuze) 针对 Linux 内核驱动的 Fuzzer
- [**153**星][10m] [Py] [k0retux/fuddly](https://github.com/k0retux/fuddly) Fuzzing/数据操纵(Data Manipulation)框架
- [**92**星][3y] [Hack] [oracle/kernel-fuzzing](https://github.com/oracle/kernel-fuzzing) Fuzzers for the Linux kernel
- [**70**星][7y] [JS] [qburst/penq](https://github.com/qburst/penq) PenQ is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
- [**66**星][6y] [JS] [owasp/appsec-browser-bundle](https://github.com/owasp/appsec-browser-bundle) The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
- [**10**星][6y] [zsenda/stebb](https://github.com/zsenda/stebb) STeBB (Security Testing Browser Bundle ) is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.
- [**8**星][7y] [C] [rgbkrk/iknowthis](https://github.com/rgbkrk/iknowthis) fuzz testing framework for Linux system calls
- 2019.07 [cloudflare] [A gentle introduction to Linux Kernel fuzzing](https://blog.cloudflare.com/a-gentle-introduction-to-linux-kernel-fuzzing/)
- 2019.05 [freebuf] [在没有源代码的情况下对Linux二进制代码进行模糊测试](https://www.freebuf.com/articles/system/203302.html)
- 2018.09 [aliyun] [linux下fuzz初试](https://xz.aliyun.com/t/2714)
- 2017.09 [ostechnix] [Pick – A Commandline Fuzzy Search Tool For Linux](https://www.ostechnix.com/pick-commandline-fuzzy-search-tool-linux/)
- 2012.05 [freebuf] [自动化模糊测试框架（BFF）- linux和Mac OS X上的fuzzer工具](http://www.freebuf.com/sectool/1319.html)
- 2012.01 [crossbowerbt] [In-memory-fuzzing in Linux (with GDB and Python)](https://crossbowerbt.github.io/in_memory_fuzzing.html)
***
- [**13**星][4y] [Py] [yformaggio/vxfuzz](https://github.com/yformaggio/vxfuzz) Some VxWorks fuzzing examples using Cisco-Kitty and WDBDbg framework
- 2016.01 [knownsec] [VxWorks Fuzzing 之道：VxWorks工控实时操作系统漏洞挖掘调试与利用揭秘](http://blog.knownsec.com/2016/01/vxworks-real-time-operation-system-fuzzing/)
***
- [**283**星][4y] [Py] [fuzzing/mffa](https://github.com/fuzzing/mffa) Media Fuzzing Framework for Android
- [**218**星][6m] [HTML] [ajinabraham/droid-application-fuzz-framework](https://github.com/ajinabraham/droid-application-fuzz-framework) Android application fuzzing framework with fuzzers and crash monitor.
- [**111**星][3y] [Java] [mindmac/intentfuzzer](https://github.com/mindmac/intentfuzzer) A Tool to fuzz Intent on Android
- [**108**星][5y] [Py] [mit-ll/ll-fuzzer](https://github.com/mit-ll/ll-fuzzer) An automated NFC fuzzing framework for Android devices.
- [**94**星][29d] [Py] [imtiazkarimik23/atfuzzer](https://github.com/imtiazkarimik23/atfuzzer) "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" ACSAC 2019
- [**72**星][3y] [Py] [antojoseph/droid-ff](https://github.com/antojoseph/droid-ff) Android File Fuzzing Framework
- [**55**星][5y] [C] [anestisb/melkor-android](https://github.com/anestisb/melkor-android) An Android port of the melkor ELF fuzzer
- [**32**星][5y] [Py] [jonmetz/androfuzz](https://github.com/jonmetz/androfuzz) A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process
- [**25**星][6y] [Java] [thypon/androidfuzz](https://github.com/thypon/androidfuzz) JavaFuzz 4 Android
- [**20**星][11m] [Rust] [gamozolabs/slime_tree](https://github.com/gamozolabs/slime_tree) Worst Android kernel fuzzer
- [**6**星][1y] [Py] [datadancer/hiafuzz](https://github.com/datadancer/hiafuzz) Hybrid Interface Aware Fuzz for Android Kernel Drivers
- [**2**星][10d] [Java] [oxagast/ansvif_android](https://github.com/oxagast/ansvif_android) An Android frontend for ansvif fuzzing
- 2018.10 [aliyun] [如何打造我们自己的Android fuzzer](https://xz.aliyun.com/t/2950)
- 2018.03 [freebuf] [DAFF：Android应用程序Fuzzing框架](http://www.freebuf.com/sectool/164794.html)
- 2016.11 [360] [Fuzzing Android：挖掘Android系统组件组件中的漏洞](https://www.anquanke.com/post/id/84979/)
- 2016.09 [deepsec] [DeepSec 2016 Talk: Fuzzing Remote Interfaces for System Services in Android – Alexandru Blanda](http://blog.deepsec.net/deepsec-2016-talk-fuzzing-remote-interfaces-system-services-android-alexandru-blanda/)
- 2016.02 [deepsec] [DeepSec Video: File Format Fuzzing in Android – Giving a Stagefright to the Android Installer](http://blog.deepsec.net/deepsec-video-file-format-fuzzing-in-android-giving-a-stagefright-to-the-android-installer/)
- 2016.01 [freebuf] [四个参数搞定安卓驱动fuzzing！（附DeathFuzzer工具）](http://www.freebuf.com/sectool/92638.html)
***
- [**7**星][1y] [C] [ukern-developers/xnu-kernel-fuzzer](https://github.com/ukern-developers/xnu-kernel-fuzzer) Kernel Fuzzer for Apple's XNU, mainly meant for the iOS operating system
- 2012.10 [pediy] [[原创]IOS黑客手册第六章-iOS应用程序模糊测试挖掘(第一部分)](https://bbs.pediy.com/thread-157234.htm)
***
- [**46**星][6y] [nccgroup/frisbeelite](https://github.com/nccgroup/frisbeelite) A GUI-based USB device fuzzer
- [**36**星][2y] [Py] [ernw/dizzy](https://github.com/ernw/dizzy) Network and USB protocol fuzzing toolkit.
- [**33**星][3y] [Py] [ernw/dizzy-legacy](https://github.com/ernw/dizzy-legacy) Network and USB protocol fuzzing toolkit.
- 2019.08 [4hou] [现有USB模糊测试技术的总结（下）](https://www.4hou.com/info/news/19413.html)
- 2019.08 [4hou] [现有USB模糊测试技术的总结（上）](https://www.4hou.com/web/19412.html)
- 2019.07 [davejingtian] [USB Fuzzing: A USB Perspective](https://davejingtian.org/2019/07/17/usb-fuzzing-a-usb-perspective/)
- 2018.12 [ZeroNights] [HC MA - Massive Scale USB Device Driver Fuzz WITHOUT device](https://www.youtube.com/watch?v=7F4yDAHoPgs)
- 2014.06 [quarkslab] [USB Fuzzing Basics: From fuzzing to bug reporting](https://blog.quarkslab.com/usb-fuzzing-basics-from-fuzzing-to-bug-reporting.html)
***
- [**95**星][1y] [HTML] [nytrorst/xssfuzzer](https://github.com/nytrorst/xssfuzzer) XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
- [**38**星][4y] [C#] [cweb/unicode-hax](https://github.com/cweb/unicode-hax) A library to assist in security-testing Unicode enabled applications during fuzzing, XSS, SQLi, etc.
- [**38**星][7y] [Py] [matthewdfuller/intellifuzz-xss](https://github.com/matthewdfuller/intellifuzz-xss) An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match
- [**26**星][5y] [Go] [rverton/xssmap](https://github.com/rverton/xssmap) (DOM-)XSS fuzzer based on phantomjs and go.
- [**24**星][1y] [Py] [jiangsir404/xss-sql-fuzz](https://github.com/jiangsir404/xss-sql-fuzz) burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz
- [**23**星][4y] [Py] [immunio/immunio-xss-fuzzer](https://github.com/immunio/immunio-xss-fuzzer) Immunio's XSS Fuzzer tool
- [**22**星][3y] [PHP] [0x584a/fuzzxssphp](https://github.com/0x584a/fuzzxssphp) PHP版本的反射型xss扫描，支持GET，POST
- [**1**星][16d] [C#] [naivenom/ariadna](https://github.com/naivenom/ariadna) Fuzzer simple para encontrar vulnerabilidades sql y xss
- 2019.05 [aliyun] [浅析一种简单暴力的Xss Fuzz手法](https://xz.aliyun.com/t/4985)
- 2018.12 [freebuf] [利用XSStrike Fuzzing XSS漏洞](https://www.freebuf.com/articles/web/191003.html)
- 2018.12 [ostorlab] [Fuzzing strategies for DOM XSS - Part 1](http://blog.ostorlab.co/2018/12/fuzzing-strategies-for-dom-xss-coverage.html)
- 2012.11 [mindedsecurity] [DOMinatorPro Fuzzer finds a DOM XSS on Google.com](http://blog.mindedsecurity.com/2012/11/dominatorpro-fuzzer-finds-dom-xss-on.html)
- [**394**星][3m] [C] [coolervoid/0d1n](https://github.com/coolervoid/0d1n) Web security tool to make fuzzing at HTTP/S, Beta
- [**343**星][1y] [Py] [joxeankoret/nightmare](https://github.com/joxeankoret/nightmare) 分布式模糊测试套件，具有Web管理功能
- [**182**星][5m] [Rust] [phra/rustbuster](https://github.com/phra/rustbuster) A Comprehensive Web Fuzzer and Content Discovery Tool
- [**148**星][3m] [Perl] [henshin/filebuster](https://github.com/henshin/filebuster) An extremely fast and flexible web fuzzer
- [**111**星][10m] [l3m0n/webfuzzattack](https://github.com/l3m0n/webfuzzattack) web模糊测试 - 将漏洞可能性放大
- [**94**星][1y] [Py] [andresriancho/websocket-fuzzer](https://github.com/andresriancho/websocket-fuzzer) HTML5 WebSocket message fuzzer
- [**92**星][2m] [C] [jonathanmetzman/wasm-fuzzing-demo](https://github.com/jonathanmetzman/wasm-fuzzing-demo) Demos of and walkthroughs on in-browser fuzzing using WebAssembly
- [**61**星][1y] [Py] [graniet/operative-framework-hd](https://github.com/graniet/operative-framework-hd) operative framework HD is the digital investigation framework, you can interact with websites, email address, company, people, ip address, vulnerability fuzzing ... interact with basic/graphical view and export with XML, JSON, use database management...
- [**58**星][9m] [HTML] [leonwxqian/lucky-js-fuzz](https://github.com/leonwxqian/lucky-js-fuzz) A web page based fuzzer that generates random JS statements then fuzz in the web-browser.
- [**55**星][3y] [Py] [mseclab/burp-pyjfuzz](https://github.com/mseclab/burp-pyjfuzz) Burp Suite plugin which implement PyJFuzz for fuzzing web application.
- [**53**星][2y] [JS] [danigargu/urlfuzz](https://github.com/danigargu/urlfuzz) Another web fuzzer written in NodeJS
- [**51**星][5m] [CSS] [mobsf/capfuzz](https://github.com/mobsf/capfuzz) CapFuzz - capture, fuzz & intercept web traffic.
- [**37**星][3m] [Py] [mak-/scanomaly](https://github.com/mak-/scanomaly) This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
- [**22**星][1m] [Py] [z3pp/zfuzz](https://github.com/z3pp/zfuzz) Simple python web fuzzer
- [**19**星][2y] [JS] [mozillasecurity/framboise](https://github.com/mozillasecurity/framboise) Framboise is a fuzzer for in-depth testing of WebAPIs.
- [**17**星][2m] [Py] [avalz/waf-a-mole](https://github.com/avalz/waf-a-mole) A guided mutation-based fuzzer for ML-based Web Application Firewalls
- [**16**星][2y] [CSS] [sweetchipsw/sweetmon_legacy](https://github.com/sweetchipsw/sweetmon_legacy) 'SWEETMON' is a fuzzer monitoring service based python3 + django. User can check their fuzzers and crashes on the web. It can reduce repetitive work for fuzz testers. This is a legacy sweetmon. The new sweetmon is now being developed
- [**6**星][1y] [Py] [mattjegan/wtfuzz](https://github.com/mattjegan/wtfuzz) A pip-installable tool used for checking the existence of different types of web resources
- [**5**星][2y] [Py] [phplaber/yawf](https://github.com/phplaber/yawf) 一个基于 OWASP 开源的 Web 漏洞模糊测试工具
- [**4**星][2y] [Java] [huvuqu/fuzz18plus](https://github.com/huvuqu/fuzz18plus) Advance of fuzzing for Web pentest. Based on Burp extension, send HTTP request template out to Python fuzzer.
- [**3**星][1y] [Py] [yuxiaokui/hackerone](https://github.com/yuxiaokui/hackerone) Fuzz website
- [**2**星][2y] [yehgdotnet/jhijack](https://github.com/yehgdotnet/jhijack) A Java Hijacking tool for web application session security assessment. A simple Java Fuzzer that can mainly be used for numeric session hijacking and parameter enumeration. Demonstration video is also available.
- [**1**星][7m] [C] [postrequest/cbuster](https://github.com/postrequest/cbuster) Web server directory and file fuzzer
- 2019.06 [aliyun] [fuzz web请求时,遇到请求参数被前端加signature怎么办](https://xz.aliyun.com/t/5384)
- 2018.12 [aliyun] [Web Fuzz](https://xz.aliyun.com/t/3600)
- 2018.07 [360] [议题解读《我的Web应用安全模糊测试之路》](https://www.anquanke.com/post/id/152729/)
- 2018.05 [pentestingexperts] [BlackWidow – A Python Based Web Application Scanner To Gather OSINT And Fuzz For OWASP Vulnerabilities On A Target Website](http://www.pentestingexperts.com/blackwidow-a-python-based-web-application-scanner-to-gather-osint-and-fuzz-for-owasp-vulnerabilities-on-a-target-website/)
- 2018.03 [360] [如何Fuzz Json Web Services](https://www.anquanke.com/post/id/100916/)
- 2018.03 [websecurify] [Fuzzing JSON Web Services](https://blog.websecurify.com/2018/03/fuzzing-json-web-services.html)
- 2017.12 [themiddleblue] [Detecting human users: Is there a way to block enumeration, fuzz or web scan?](https://medium.com/p/14102a92f10b)
- 2017.09 [freebuf] [如何通过BurpSuiteMacro自动化模糊测试Web应用的输入点](http://www.freebuf.com/articles/web/147182.html)
- 2017.09 [4hou] [利用Burp“宏”解决自动化 web fuzzer的登录问题](http://www.4hou.com/web/7542.html)
- 2017.09 [securelayer7] [使用 Burp 的宏功能，实现 WebApp 输入 Fuzzing 的自动化](http://blog.securelayer7.net/automating-web-apps-input-fuzzing-via-burp-macros/)
- 2017.09 [securelayer7] [Automating Web Apps Input fuzzing via Burp Macros](https://blog.securelayer7.org/automating-web-apps-input-fuzzing-via-burp-macros/)
- 2016.12 [n0where] [Extremely Fast Flexible Web Fuzzer: Filebuster](https://n0where.net/extremely-fast-flexible-web-fuzzer-filebuster)
- 2016.03 [] [浅谈WEB Fuzz中需要关注的7种响应](http://www.91ri.org/15439.html)
- 2015.04 [toolswatch] [[New Tool] 0d1n v1.0 Web App Bruteforcer and Fuzzer Released](http://www.toolswatch.org/2015/04/new-tool-0d1n-v1-0-web-app-bruteforcer-and-fuzzer-released/)
- 2014.10 [tekwizz123] [Finding New Vulns With Fuzzing and Turning them Into An Exploit Part 1: Kolibri Webserver 2.0 POST Exploit Example](http://tekwizz123.blogspot.com/2014/10/finding-new-vulns-with-fuzzing-and.html)
- 2014.02 [freebuf] [手动web应用程序渗透测试-模糊测试中的后缀与前缀](http://www.freebuf.com/articles/web/26675.html)
- 2013.09 [htbridge] [ImmuniWeb® Self-Fuzzer Firefox Extension](https://www.htbridge.com/blog/immuniweb_self_fuzzer_firefox_extension.html)
- 2013.07 [digi] [Fuzzing WebSockets With ZAP](https://digi.ninja/blog/zap_fuzzing.php)
- 2012.09 [freebuf] [Web应用漏洞fuzz工具 – teenage mutant ninja turtles V 1.5](http://www.freebuf.com/sectool/5623.html)
***
- [**366**星][2y] [C] [k0keoyo/kdriver-fuzzer](https://github.com/k0keoyo/kdriver-fuzzer) 基于ioctlbf框架编写的驱动漏洞挖掘工具kDriver Fuzzer
- [**366**星][3y] [C] [fsecurelabs/kernelfuzzer](https://github.com/FSecureLABS/KernelFuzzer) Cross Platform Kernel Fuzzer Framework
- [**243**星][7m] [C] [compsec-snu/razzer](https://github.com/compsec-snu/razzer) A Kernel fuzzer focusing on race bugs
- [**212**星][2y] [C] [fsecurelabs/osxfuzz](https://github.com/FSecureLABS/OSXFuzz) macOS Kernel Fuzzer
- [**211**星][2y] [C] [silvermoonsecurity/passivefuzzframeworkosx](https://github.com/silvermoonsecurity/passivefuzzframeworkosx) This framework is for fuzzing OSX kernel vulnerability based on passive inline hook mechanism in kernel mode.
- [**67**星][3y] [richinseattle/evolutionarykernelfuzzing](https://github.com/richinseattle/evolutionarykernelfuzzing) Materials for the Evolutionary Kernel Fuzzing talk at Black Hat USA 2017
- [**22**星][10y] [C] [bringhurst/xnufuzz](https://github.com/bringhurst/xnufuzz) An XNU kernel fuzz tool
- 2019.08 [trendmicro] [LLDBFuzzer: Debugging and Fuzzing the Apple Kernel with LLDB Script](https://blog.trendmicro.com/trendlabs-security-intelligence/lldbfuzzer-debugging-and-fuzzing-the-apple-kernel-with-lldb-script/)
- 2019.06 [aliyun] [内核漏洞挖掘技术系列(5)——KernelFuzzer](https://xz.aliyun.com/t/5443)
- 2019.04 [aliyun] [内核fuzz技术系列(2)——bochspwn](https://xz.aliyun.com/t/4800)
- 2019.03 [securitygossip] [Razzer: Finding Kernel Race Bugs Through Fuzzing](https://securitygossip.com/blog/2019/03/06/razzer-finding-kernel-race-bugs-through-fuzzing/)
- 2019.03 [sjtu] [Razzer: Finding Kernel Race Bugs Through Fuzzing](https://loccs.sjtu.edu.cn/gossip/blog/2019/03/06/razzer-finding-kernel-race-bugs-through-fuzzing/)
- 2018.02 [360] [基于IOCTLBF框架编写的驱动漏洞挖掘工具KDRIVER FUZZER](https://www.anquanke.com/post/id/97245/)
- 2018.02 [venus] [基于 ioctlbf 框架编写的驱动漏洞挖掘工具 kDriver Fuzzer](https://paper.seebug.org/523/)
- 2018.01 [whereisk0shl] [基于ioctlbf框架编写的驱动漏洞挖掘工具kDriver Fuzzer](http://whereisk0shl.top/post/2018-01-30)
- 2017.11 [n0where] [Interface Aware Fuzzing for Kernel Drivers: DIFUZE](https://n0where.net/interface-aware-fuzzing-for-kernel-drivers-difuze)
- 2014.03 [debasish] [In-Memory Kernel Driver(IOCTL)Fuzzing using Python](http://www.debasish.in/2014/03/in-memory-kernel-driverioctlfuzzing.html)
- 2013.03 [pediy] [第一次发帖，驱动Fuzz程序[持续开发完善中]](https://bbs.pediy.com/thread-163646.htm)
- 2007.09 [evilcodecave] [Driver Fuzzing with Kartoffel](https://evilcodecave.wordpress.com/2007/09/06/driver-fuzzing-with-kartoffel/)
***
- [**234**星][7m] [HTML] [rootup/bfuzz](https://github.com/rootup/bfuzz) Fuzzing Browsers
- [**195**星][18d] [Py] [mozillasecurity/grizzly](https://github.com/mozillasecurity/grizzly) A cross-platform browser fuzzing framework
- [**113**星][8m] [Visual Basic .NET] [dzzie/comraider](https://github.com/dzzie/comraider) ActiveX Fuzzing tool with GUI, object browser, system scanner, and distributed auditing capabilities
- [**69**星][3m] [Py] [lylemi/browser-fuzz-summarize](https://github.com/lylemi/browser-fuzz-summarize) Browser Fuzz Summarize / 浏览器模糊测试综述
- [**66**星][5y] [Py] [hikerell/bfuzzer](https://github.com/hikerell/bfuzzer) A Browser Fuzzer for Vulnerbilities
- 2019.05 [360] [通过Fuzzing找出浏览器的一些怪癖](https://www.anquanke.com/post/id/179498/)
- 2019.05 [portswigger] [Provoking browser quirks with behavioural fuzzing | Blog](https://portswigger.net/blog/provoking-browser-quirks-with-behavioural-fuzzing)
- 2016.01 [freebuf] [从零开始学Fuzzing系列：浏览器fuzz工具探究之框架篇](http://www.freebuf.com/sectool/93130.html)
- 2015.12 [freebuf] [从零开始学Fuzzing系列：浏览器挖掘框架Morph诞生记](http://www.freebuf.com/sectool/89001.html)
- 2015.11 [nsfocus] [浏览器fuzz框架介绍](http://blog.nsfocus.net/web-browser-fuzzing/)
- 2013.09 [null] [My experience with the Browser Fuzzing Humla session – 31st August 2013](https://blog.null.co.in/my-experience-with-the-browser-fuzzing-humla-session-31st-august-2013/)
- 2012.08 [freebuf] [X-Fuzzer – 动态浏览器Fuzz工具](http://www.freebuf.com/sectool/5453.html)
- 2006.03 [rapid7] [Browser fuzzing for fun and profit](https://blog.rapid7.com/2006/03/30/browser-fuzzing-for-fun-and-profit/)
***
- [**318**星][28d] [Py] [cisco-talos/mutiny-fuzzer](https://github.com/cisco-talos/mutiny-fuzzer) a network fuzzer that operates by replaying PCAPs through a mutational fuzzer.
- [**243**星][1y] [Py] [hgascon/pulsar](https://github.com/hgascon/pulsar) 具有自动学习、模拟协议功能的网络 fuzzer
- [**235**星][5m] [C] [dongdongshe/neuzz](https://github.com/dongdongshe/neuzz) neural network assisted fuzzer
- [**221**星][29d] [Py] [nccgroup/fuzzowski](https://github.com/nccgroup/fuzzowski) the Network Protocol Fuzzer that we will want to use.
- [**197**星][2m] [C] [denandz/fuzzotron](https://github.com/denandz/fuzzotron) A TCP/UDP based network daemon fuzzer
- [**172**星][1y] [Py] [niloofarkheirkhah/nili](https://github.com/niloofarkheirkhah/nili) 网络扫描工具，中间人，协议逆向工程和 Fuzzing
- [**147**星][1y] [Py] [brain-research/tensorfuzz](https://github.com/brain-research/tensorfuzz) A library for performing coverage guided fuzzing of neural networks
- [**74**星][1y] [Py] [dobin/ffw](https://github.com/dobin/ffw) A fuzzing framework for network servers
- [**65**星][3y] [Py] [plantdaddy/fuzzap](https://github.com/PlantDaddy/FuzzAP) A python script for obfuscating wireless networks
- [**57**星][3y] [C] [hbowden/nextgen](https://github.com/hbowden/nextgen) A Genetic File, Syscall and Network Fuzzer.
- [**50**星][6y] [Py] [isecpartners/rtspfuzzer](https://github.com/isecpartners/rtspfuzzer) RTSP network protocol fuzzer
- [**44**星][1y] [Perl] [wireghoul/doona](https://github.com/wireghoul/doona) Network based protocol fuzzer
- [**35**星][5m] [Py] [amossys/fragscapy](https://github.com/amossys/fragscapy) Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
- [**20**星][4m] [Py] [m-zakeri/iust_deep_fuzz](https://github.com/m-zakeri/iust_deep_fuzz) A file format fuzzer base on deep neural networks.
- [**15**星][2m] [C++] [vitaliy-grigoriev/protocol-analyzer](https://github.com/vitaliy-grigoriev/protocol-analyzer) Fuzz testing framework for network protocols.
- [**5**星][2y] [Shell] [foospidy/fuzzcat](https://github.com/foospidy/fuzzcat) Rudimentary network protocol fuzzer using bash, netcat, and other tools.
- [**1**星][2m] [Py] [ins1gn1a/woollymammoth](https://github.com/ins1gn1a/woollymammoth) Toolkit for manual buffer exploitation, which features a basic network socket fuzzer, offset pattern generator and detector, bad character identifier, shellcode carver, and a vanilla EIP exploiter
- 2018.06 [freebuf] [beSTORM之网络协议Fuzz入门教程](http://www.freebuf.com/sectool/173617.html)
- 2015.12 [nsfocus] [SCADA网络fuzzing测试及防护](http://blog.nsfocus.net/scada-network-fuzzing-test-protection/)
- 2015.09 [topsec] [用alphafuzzer挖掘网络协议漏洞](http://blog.topsec.com.cn/ad_lab/alphafuzzer_npfuzz/)
- 2015.09 [topsec] [用alphafuzzer挖掘网络协议漏洞](http://blog.topsec.com.cn/alphafuzzer_npfuzz/)
- 2013.10 [pediy] [[原创]基于SKIPE的网络协议Fuzzing技术](https://bbs.pediy.com/thread-180619.htm)
- 2013.10 [toolswatch] [[New Tool] Doona Network fuzzing tool v0.7 released](http://www.toolswatch.org/2013/10/new-tool-doona-network-fuzzing-tool-v0-7-released/)
***
- [**208**星][4m] [Java] [h3xstream/http-script-generator](https://github.com/h3xstream/http-script-generator) ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
- [**62**星][6m] [Py] [pinnace/burp-jwt-fuzzhelper-extension](https://github.com/pinnace/burp-jwt-fuzzhelper-extension) Burp扩展, 用于Fuzzing JWT
- [**42**星][3y] [team-firebugs/burp-lfi-tests](https://github.com/team-firebugs/burp-lfi-tests) Fuzzing for LFI using Burpsuite
- [**28**星][3y] [Py] [floyd-fuh/burp-httpfuzzer](https://github.com/floyd-fuh/burp-httpfuzzer) Burp plugin to do random fuzzing of HTTP requests
- [**18**星][3m] [Py] [mgeeky/burpcontextawarefuzzer](https://github.com/mgeeky/burpcontextawarefuzzer) BurpSuite's payload-generation extension aiming at applying fuzzed test-cases depending on the type of payload (integer, string, path; JSON; XML; GWT; binary) and following encoding-scheme applied originally.
- [**12**星][3y] [Java] [portswigger/reissue-request-scripter](https://github.com/portswigger/reissue-request-scripter) ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
- 2018.11 [d0znpp] [Extending fuzzing with Burp by FAST](https://medium.com/p/f67d8b5d63e7)
- 2017.09 [360] [如何使用Burp Suite Macros绕过防护进行自动化fuzz测试](https://www.anquanke.com/post/id/86768/)
- 2017.08 [4hou] [如何使用Burp Suite模糊测试SQL注入、XSS、命令执行漏洞](http://www.4hou.com/vulnerable/6933.html)
- 2017.07 [hackingarticles] [Fuzzing SQL,XSS and Command Injection using Burp Suite](http://www.hackingarticles.in/fuzzing-sqlxss-command-injection-using-burp-suite/)
- 2013.10 [debasish] [Fuzzing Facebook for $$$ using Burpy](http://www.debasish.in/2013/10/fuzzing-facebook-for-using-burpy.html)
- 2010.09 [netspi] [Fuzzing Parameters in CSRF Resistant Applications with Burp Proxy](https://blog.netspi.com/fuzzing-parameters-in-csrf-resistant-applications-with-burp-proxy/)
***
- 2019.08 [aliyun] [fuzz闭源pdf查看器](https://xz.aliyun.com/t/6003)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 7: How to detect when a PDF finished loading](https://www.youtube.com/watch?v=XBEw6bYLHUM)
- 2013.01 [coldwind] [PDF Fuzzing Fun Continued: Status Update](http://gynvael.coldwind.pl/?id=493)
- 2013.01 [vexillium] [PDF Fuzzing Fun Continued: Status Update](http://j00ru.vexillium.org/?p=1507)
- 2013.01 [vexillium] [PDF Fuzzing Fun Continued: Status Update](https://j00ru.vexillium.org/2013/01/pdf-fuzzing-fun-continued-status-update/)
- 2012.08 [coldwind] [PDF fuzzing and Adobe Reader 9.5.1 and 10.1.3 multiple critical vulnerabilities](http://gynvael.coldwind.pl/?id=483)
- 2012.08 [vexillium] [PDF fuzzing and Adobe Reader 9.5.1 and 10.1.3 multiple critical vulnerabilities](http://j00ru.vexillium.org/?p=1175)
- 2012.08 [vexillium] [PDF fuzzing and Adobe Reader 9.5.1 and 10.1.3 multiple critical vulnerabilities](https://j00ru.vexillium.org/2012/08/pdf-fuzzing-and-adobe-reader-9-5-1-and-10-1-3-multiple-critical-vulnerabilities/)
***
- [**849**星][3m] [Swift] [googleprojectzero/fuzzilli](https://github.com/googleprojectzero/fuzzilli) A JavaScript Engine Fuzzer
- [**456**星][14d] [TS] [fuzzitdev/jsfuzz](https://github.com/fuzzitdev/jsfuzz) coverage guided fuzz testing for javascript
- 2018.01 [fuzzstation] [Fuzz Stati0n Pivots to Node JS](https://medium.com/p/5fb76253489)
- 2017.10 [nul] [开源了我之前做的jsfuzzer](http://www.nul.pw/2017/10/16/247.html)
***
- [**1386**星][23d] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
- [**39**星][11m] [C] [ivanfratric/winafl](https://github.com/ivanfratric/winafl) Windows 二进制文件fuzz工具
- [**28**星][1y] [C] [mxmssh/netafl](https://github.com/mxmssh/netafl) winAFL patch to enable network-based apps fuzzing
- [**27**星][1y] [C] [intelpt/winafl-intelpt](https://github.com/intelpt/winafl-intelpt) A fork of AFL for fuzzing Windows binaries
- 2019.11 [freebuf] [模糊测试工具WinAFL使用指南](https://www.freebuf.com/articles/system/216437.html)
- 2019.05 [aliyun] [WinAFL 源码分析](https://xz.aliyun.com/t/5108)
- 2019.02 [riusksk] [winafl中基于插桩的覆盖率反馈原理](http://riusksk.me/2019/02/02/winafl中基于插桩的覆盖率反馈原理/)
- 2019.02 [riusksk] [winafl中基于插桩的覆盖率反馈原理](http://riusksk.me/2019/02/02/winafl中基于插桩的覆盖率反馈原理/)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 4: WinAFL workflow to fuzz Mimikatz and Taint Analysis](https://www.youtube.com/watch?v=Cq7Wv_niSLE)
- 2017.09 [sec] [Hack the Hacker – Fuzzing Mimikatz On Windows With WinAFL & Heatmaps (0day)](https://sec-consult.com/en/blog/2017/09/hack-the-hacker-fuzzing-mimikatz-on-windows-with-winafl-heatmaps-0day/)
- 2017.09 [360] [使用 WinAFL 对 MSXML6 库进行模糊测试](https://www.anquanke.com/post/id/86905/)
- 2017.06 [knownsec] [初识 Fuzzing 工具 WinAFL](http://blog.knownsec.com/2017/06/%e5%88%9d%e8%af%86-fuzzing-%e5%b7%a5%e5%85%b7-winafl/)
- 2017.01 [4hou] [智能模糊测试工具 Winafl 的使用与分析](http://www.4hou.com/technology/2800.html)
- 2016.09 [jowto] [智能模糊测试工具 Winafl 的使用与分析](http://blog.jowto.com/?p=150)
- 2016.08 [360] [初探Windows Fuzzing神器----Winafl](https://www.anquanke.com/post/id/84363/)
- 2016.07 [n0where] [Fuzzing Windows Binaries: WinAFL](https://n0where.net/fuzzing-windows-binaries-winafl)
- [**462**星][3y] [C] [nccgroup/triforceafl](https://github.com/nccgroup/triforceafl) AFL/QEMU fuzzing with full-system emulation.
- [**148**星][3y] [C] [nccgroup/triforcelinuxsyscallfuzzer](https://github.com/nccgroup/triforcelinuxsyscallfuzzer) A linux system call fuzzer using TriforceAFL
- [**41**星][3y] [C] [nccgroup/triforceopenbsdfuzzer](https://github.com/nccgroup/triforceopenbsdfuzzer) System call fuzzing of OpenBSD amd64 using TriforceAFL (i.e. AFL and QEMU)
- 2019.07 [aliyun] [内核漏洞挖掘技术系列(6)——TriforceAFL和KAFL](https://xz.aliyun.com/t/5521)
- [**412**星][2y] [Py] [rub-syssec/kafl](https://github.com/rub-syssec/kafl) Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
- [**310**星][16d] [C] [aflsmart/aflsmart](https://github.com/aflsmart/aflsmart) Smart Greybox Fuzzing (
- 2019.04 [freebuf] [AFLSmart工具简单分析及使用介绍](https://www.freebuf.com/sectool/199010.html)
- [**831**星][17d] [C] [rust-fuzz/afl.rs](https://github.com/rust-fuzz/afl.rs) run AFL on code written in the Rust programming language.
- [**808**星][8d] [C] [google/afl](https://github.com/google/afl) american fuzzy lop - a security-oriented fuzzer
- [**549**星][2y] [C] [mirrorer/afl](https://github.com/mirrorer/afl) american fuzzy lop (copy of the source code for easy access)
- [**546**星][10m] [Py] [shellphish/fuzzer](https://github.com/shellphish/fuzzer) Americanfuzzy lop 的 Python 版本接口
- [**446**星][7d] [C] [vanhauser-thc/aflplusplus](https://github.com/vanhauser-thc/aflplusplus) 带社区补丁的afl 2.56b
- [**428**星][7m] [C] [mykter/afl-training](https://github.com/mykter/afl-training) Exercises to learn how to fuzz with American Fuzzy Lop
- [**386**星][2y] [C] [battelle/afl-unicorn](https://github.com/Battelle/afl-unicorn) afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
- [**364**星][2y] [Py] [rc0r/afl-utils](https://github.com/rc0r/afl-utils) Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization
- [**298**星][1y] [Py] [mrash/afl-cov](https://github.com/mrash/afl-cov) Produce code coverage results with gcov from afl-fuzz test cases
- [**296**星][4m] [C] [mboehme/aflfast](https://github.com/mboehme/aflfast) AFLFast (extends AFL with Power Schedules)
- [**246**星][3y] [C] [ele7enxxh/android-afl](https://github.com/ele7enxxh/android-afl) Fuzzing Android program with american fuzzy lop (AFL)
- [**215**星][6m] [C] [hunter-ht-2018/ptfuzzer](https://github.com/hunter-ht-2018/ptfuzzer) 通过使用Intel PT收集分支信息来改善AFL
- [**208**星][4m] [Py] [jwilk/python-afl](https://github.com/jwilk/python-afl) American Fuzzy Lop fork server and instrumentation for pure-Python code
- [**199**星][13d] [C] [aflgo/aflgo](https://github.com/aflgo/aflgo) Directed Greybox Fuzzing with AFL
- [**192**星][2m] [Py] [fgsect/unicorefuzz](https://github.com/fgsect/unicorefuzz) Fuzzing the Kernel Using AFL-Unicorn
- [**187**星][30d] [C] [tunz/afl-fuzz-js](https://github.com/tunz/afl-fuzz-js) afl-fuzz for javascript
- [**183**星][8d] [microsvuln/awesome-afl](https://github.com/microsvuln/awesome-afl) A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers with AFL-fuzzing tutorials
- [**177**星][2y] [C] [mcarpenter/afl](https://github.com/mcarpenter/afl) DEPRECATED. Will be removed 09/2019. Please see
- [**175**星][1y] [C] [carolemieux/afl-rb](https://github.com/carolemieux/afl-rb) AFL Fuzz 工具的修改版，针对 Rare Branches
- [**168**星][4y] [C] [jdbirdwell/afl](https://github.com/jdbirdwell/afl) american fuzzy lop for network fuzzing (unofficial) -- official afl site is
- [**152**星][5y] [C++] [mothran/aflpin](https://github.com/mothran/aflpin) aflpin enables afl to fuzz blackbox binaries using a pin tool to trace execution branches.
- [**141**星][9d] [C++] [talos-vulndev/afl-dyninst](https://github.com/talos-vulndev/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
- [**141**星][3m] [Py] [wmliang/pe-afl](https://github.com/wmliang/pe-afl)
- [**135**星][2y] [Java] [isstac/kelinci](https://github.com/isstac/kelinci) AFL-based fuzzing for Java
- [**125**星][26d] [C#] [metalnem/sharpfuzz](https://github.com/metalnem/sharpfuzz) AFL-based fuzz testing for .NET
- [**119**星][1m] [C] [zyw-200/firmafl](https://github.com/zyw-200/firmafl) FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.
- [**110**星][2y] [C++] [vegard/prog-fuzz](https://github.com/vegard/prog-fuzz) Compiler/source code fuzzing tool using AFL instrumentation
- [**78**星][3m] [JS] [andreafioraldi/frida-js-afl-instr](https://github.com/andreafioraldi/frida-js-afl-instr) An example on how to do performant in-memory fuzzing with AFL++ and Frida
- [**75**星][3m] [C] [puppet-meteor/mopt-afl](https://github.com/puppet-meteor/mopt-afl) MOpt-AFL provided by the paper "MOPT: Optimized Mutation Scheduling for Fuzzers"
- [**74**星][1y] [C] [forte-research/untracer-afl](https://github.com/forte-research/untracer-afl) An AFL implementation with UnTracer (our coverage-guided tracer)
- [**73**星][5m] [vanhauser-thc/afl-patches](https://github.com/vanhauser-thc/afl-patches) Patches to afl to fix bugs or add enhancements
- [**72**星][4m] [C] [shellphish/afl-other-arch](https://github.com/shellphish/afl-other-arch) AFL, with scripts to support other architectures.
- [**63**星][2m] [C] [riscure/optee_fuzzer](https://github.com/riscure/optee_fuzzer) This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.
- [**60**星][2m] [Py] [shellphish/shellphish-afl](https://github.com/shellphish/shellphish-afl) A pip wrapper around AFL.
- [**58**星][2y] [mrash/afl-cve](https://github.com/mrash/afl-cve) AFL fuzzer发现的漏洞集合
- [**53**星][2y] [C] [rc0r/afl-fuzz](https://github.com/rc0r/afl-fuzz) Non-official repository for lcamtuf's American Fuzzy Lop
- [**43**星][8m] [C++] [vanhauser-thc/afl-pin](https://github.com/vanhauser-thc/afl-pin) run AFL with pintool
- [**41**星][3y] [C] [kanglictf/afl-qai](https://github.com/kanglictf/afl-qai) A demo project for AFL with QEMU Augmented Instrumentation (qai)
- [**38**星][1m] [Py] [adrianherrera/afl-mutation-graph](https://github.com/adrianherrera/afl-mutation-graph) Recover mutation graph from an AFL seed
- [**38**星][1m] [Py] [adrianherrera/afl-mutation-graph](https://github.com/adrianherrera/afl-mutation-graph) Recover mutation graph from an AFL seed
- [**36**星][1y] [C] [abiondo/afl](https://github.com/abiondo/afl) My fork of American Fuzzy Lop
- [**36**星][10m] [C] [mboehme/pythia](https://github.com/mboehme/pythia) Pythia (extends AFL with Predictions)
- [**36**星][7d] [C++] [vanhauser-thc/afl-dyninst](https://github.com/vanhauser-thc/afl-dyninst) American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
- [**31**星][2y] [Java] [barro/java-afl](https://github.com/barro/java-afl) Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.
- [**31**星][2y] [C] [tigerpuma/afl_unicorn](https://github.com/tigerpuma/afl_unicorn)
- [**30**星][3y] [Py] [bshastry/afl-sancov](https://github.com/bshastry/afl-sancov) AFL coverage tool using Clang SanitizerCoverage
- [**29**星][4y] [Go] [bnagy/afl-launch](https://github.com/bnagy/afl-launch) Boring tool to launch multiple afl-fuzz instances
- [**25**星][4y] [C] [leetchicken/afl](https://github.com/leetchicken/afl) Unofficial American Fuzzy Lop repo
- [**24**星][4y] [C] [arizvisa/afl-cygwin](https://github.com/arizvisa/afl-cygwin) AFL "mostly" ported to cygwin
- [**23**星][3y] [Py] [markusteufelberger/afl-ddmin-mod](https://github.com/markusteufelberger/afl-ddmin-mod) Test case minimizer for afl-fuzz
- [**23**星][2y] [proteas/afl-swift](https://github.com/proteas/afl-swift) use afl to fuzz swift program
- [**22**星][8m] [C] [junxzm1990/afl-pt](https://github.com/junxzm1990/afl-pt)
- [**22**星][3y] [Py] [reflare/afl-monitor](https://github.com/reflare/afl-monitor) A monitoring script for AFL
- [**20**星][2m] [Py] [axt/afl-cov](https://github.com/axt/afl-cov) AFL fuzzing coverage CFG visualization
- [**20**星][3y] [C] [bnagy/osx-afl-llvm](https://github.com/bnagy/osx-afl-llvm) Barely working LLVM mode for AFL on OSX
- [**18**星][5m] [C++] [kirasys/unicorn-fuzzer](https://github.com/kirasys/unicorn-fuzzer) expansion of afl-unicorn using c++
- [**15**星][1y] [Py] [rc0r/afl-utils](https://gitlab.com/rc0r/afl-utils)
- [**14**星][9d] [C++] [vanhauser-thc/afl-dynamorio](https://github.com/vanhauser-thc/afl-dynamorio) run AFL with dynamorio
- [**14**星][2m] [C] [vanhauser-thc/afl-simulate](https://github.com/vanhauser-thc/afl-simulate) Simulate afl-fuzz
- [**13**星][18d] [C] [wrauner/afl-fuzzing-training](https://github.com/wrauner/afl-fuzzing-training) AFL training workshop materials
- [**12**星][5y] [C] [jonasnick/bitcoinconsensus_testcases](https://github.com/jonasnick/bitcoinconsensus_testcases) These testcases are generated by running afl-fuzz against libbitcoinconsensus.
- [**10**星][5y] [Go] [bnagy/aflfix](https://github.com/bnagy/aflfix) Use any program to perform fixups for afl via AFL_POST_LIBRARY
- [**10**星][1y] [C] [spolu/gym_fuzz1ng](https://github.com/spolu/gym_fuzz1ng) OpenAI Gym environment for binary fuzzing based on afl
- [**10**星][9m] [C++] [atrosinenko/afl-dr](https://github.com/atrosinenko/afl-dr) Experiment in implementation of an instrumentation for American Fuzzy Lop using DynamoRIO
- [**7**星][1y] [C] [cloudsriseup/fuzzy](https://github.com/cloudsriseup/fuzzy) A faster version of AFL-Fuzz used for DARPA Cyber Grand Challenge with optimized scheduler code
- [**7**星][8m] [C++] [orbitcowboy/afl_cppcheck](https://github.com/orbitcowboy/afl_cppcheck) A script to start fuzzing of cppcheck with american fuzzy lop
- [**6**星][3m] [C++] [spinpx/afl_pin_mode](https://github.com/spinpx/afl_pin_mode) Yet another AFL instrumentation tool implemented by Intel Pin.
- [**6**星][5m] [C++] [alexandrecarlton/afl-docker](https://github.com/alexandrecarlton/afl-docker) american fuzzy lop in a Docker container
- [**4**星][3m] [Py] [putsi/afl-mruby](https://github.com/putsi/afl-mruby) Docker-based AFL-Fuzzer for MRuby
- [**4**星][5m] [wolframroesler/afl-demo](https://github.com/wolframroesler/afl-demo) Simple demonstration for how to fuzz test a C++ program with AFL.
- [**1**星][4y] [C] [jhector/sphinxfuzz](https://github.com/jhector/sphinxfuzz) AFL Fuzzing environment for fuzzing pocketsphinx
- [**1**星][7m] [PHP] [antonin-deniau/php-fuzz](https://github.com/antonin-deniau/php-fuzz) A somewhat functional PHP fuzzer heavily inspired by AFL
- [**0**星][5m] [C] [innovimax/afl-1](https://github.com/innovimax/afl-1) Unofficial American Fuzzy Lop repo
- 2020.01 [freebuf] [基于AFL的Java程序Fuzz工具：Kelinci](https://www.freebuf.com/sectool/224294.html)
- 2019.12 [4hou] [基于AFL对Linux内核模糊测试的过程详述](https://www.4hou.com/penetration/21368.html)
- 2019.10 [HackersOnBoard] [AFL's Blindspot and How to Resist AFL Fuzzing for Arbitrary ELF Binaries](https://www.youtube.com/watch?v=fhNNPJVlj4A)
- 2019.10 [4hou] [使用AFL对Linux内核Fuzzing的总结](https://www.4hou.com/info/news/20269.html)
- 2019.08 [aliyun] [使用 afl-unicorn: Fuzzing 任意二进制代码](https://xz.aliyun.com/t/5968)
- 2019.08 [aliyun] [内核漏洞挖掘技术系列(6)——使用AFL进行内核漏洞挖掘(2)](https://xz.aliyun.com/t/5943)
- 2019.08 [aliyun] [使用 afl-unicorn: Fuzzing 任意二进制代码](https://xz.aliyun.com/t/5938)
- 2019.07 [robertheaton] [How to write an afl wrapper for any language](https://robertheaton.com/2019/07/08/how-to-write-an-afl-wrapper-for-any-language/)
- 2019.06 [doyler] [AFL Introduction – Installation and Basic Fuzzing](https://www.doyler.net/security-not-included/afl-introduction)
- 2019.05 [nextplatform] [Cray, AMD Tag Team On 1.5 Exaflops “Frontier” Supercomputer](https://www.nextplatform.com/2019/05/07/cray-amd-tag-team-on-1-5-exaflops-frontier-supercomputer/)
- 2019.04 [freebuf] [Pe-afl：一款支持对Windows二进制程序的afl fuzz工具](https://www.freebuf.com/sectool/199390.html)
- 2019.04 [aliyun] [AFL源码分析笔记(一)](https://xz.aliyun.com/t/4628)
- 2019.03 [freebuf] [AFL漏洞挖掘技术漫谈（二）：Fuzz结果分析和代码覆盖率](https://www.freebuf.com/articles/system/197678.html)
- 2019.03 [4hou] [Chafer使用的新的基于Python的有效载荷MechaFlounder](https://www.4hou.com/web/16725.html)
- 2019.03 [aliyun] [初探Fuzz-AFL](https://xz.aliyun.com/t/4314)
- 2019.03 [venus] [AFL 漏洞挖掘技术漫谈（二）：Fuzz 结果分析和代码覆盖率](https://paper.seebug.org/842/)
- 2019.03 [topsec] [AFL漏洞挖掘技术漫谈（一）：用AFL开始你的第一次Fuzzing](http://blog.topsec.com.cn/afl%e6%bc%8f%e6%b4%9e%e6%8c%96%e6%8e%98%e6%8a%80%e6%9c%af%e6%bc%ab%e8%b0%88%ef%bc%88%e4%b8%80%ef%bc%89%ef%bc%9a%e7%94%a8afl%e5%bc%80%e5%a7%8b%e4%bd%a0%e7%9a%84%e7%ac%ac%e4%b8%80%e6%ac%a1fuzzing/)
- 2019.03 [paloaltonetworks] [New Python-Based Payload MechaFlounder Used](https://unit42.paloaltonetworks.com/new-python-based-payload-mechaflounder-used-by-chafer/)
- 2019.02 [robertheaton] [Introducing Afl-Ruby: fuzz your Ruby programs using afl](https://robertheaton.com/2019/02/16/introducing-afl-ruby/)
- 2019.01 [mijailovic] [SharpFuzz: Bringing the power of afl-fuzz to .NET platform](https://mijailovic.net/2019/01/03/sharpfuzz/)
- 2019.01 [klee] [SAFL: Increasing and Accelerating Testing Coverage with Symbolic Execution and Guided Fuzzing](https://dl.acm.org/citation.cfm?id=3183494)
- 2018.10 [obscuritylabs] [Docker + AFL: Effective, scalable reproducible fuzzing](https://blog.obscuritylabs.com/docker-afl-effective-reproducable-fuzzing/)
- 2018.10 [cloudflare] [Mapping Factorio with Leaflet](https://blog.cloudflare.com/mapping-factorio-with-leaflet/)
- 2018.09 [aliyun] [利用Java Security Manager进行Java AFL Fuzz](https://xz.aliyun.com/t/2820)
- 2018.09 [aliyun] [提高AFL qemu模式性能](https://xz.aliyun.com/t/2805)
- 2018.09 [aliyun] [[翻译] 使用AFL对CSGO进行模糊测试](https://xz.aliyun.com/t/2705)
- 2018.08 [phoenhex] [Fuzzing Counter-Strike: Global Offensive maps files with AFL](https://phoenhex.re/2018-08-26/csgo-fuzzing-bsp)
- 2018.05 [0x00sec] [Does American fuzzy lop works on windows?](https://0x00sec.org/t/does-american-fuzzy-lop-works-on-windows/6810/)
- 2018.04 [0x00sec] [Fuzzing projects with american fuzzy lop (AFL)](https://0x00sec.org/t/fuzzing-projects-with-american-fuzzy-lop-afl/6498/)
- 2018.04 [countuponsecurity] [Intro to American Fuzzy Lop – Fuzzing with ASAN and beyond](https://countuponsecurity.com/2018/04/24/intro-to-american-fuzzy-lop-fuzzing-with-asan-and-beyond/)
- 2018.03 [countuponsecurity] [Intro to American Fuzzy Lop – Fuzzing in 5 steps](https://countuponsecurity.com/2018/03/07/intro-to-american-fuzzy-lop-fuzzing-in-5-steps/)
- 2018.02 [arxiv] [[1802.10215] Var-CNN and DynaFlow: Improved Attacks and Defenses for Website Fingerprinting](https://arxiv.org/abs/1802.10215)
- 2018.02 [hyperiongray] [Fuzzing Linux GUI/GTK Programs With American Fuzzy Lop (AFL) For Fun And Pr... You Get the Idea. Part One.](https://blog.hyperiongray.com/fuzzing-gtk-programs-with-american-fuzzy-lop-afl/)
- 2018.02 [tunnelshade] [Internals of AFL fuzzer - QEMU Instrumentation](https://tunnelshade.in/blog/2018/02/afl-internals-qemu-instrumentation/)
- 2018.02 [intideceukelaire] [OEPS: Dit verklapt Facebook over de afloop van Temptation Island](https://medium.com/p/3d2778f91e9f)
- 2018.01 [tunnelshade] [AFL fuzzer 内部实现之:Compile Time Instrumentation](https://tunnelshade.in/blog/2018/01/afl-internals-compile-time-instrumentation/)
- 2018.01 [venus] [AFL(American Fuzzy Lop)实现细节与文件变异](https://paper.seebug.org/496/)
- 2017.11 [pediy] [[翻译]类似AFL软件实现的属性测试技术](https://bbs.pediy.com/thread-222917.htm)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 2: AFL workflow with FFMPEG](https://www.youtube.com/watch?v=0dqL6vfPCek)
- 2017.11 [aliyun] [AFL-FUZZ 启用 llvm](https://xz.aliyun.com/t/1541)
- 2017.11 [njvoss299] [afl-unicorn: Part 2 — Fuzzing the ‘Unfuzzable’](https://medium.com/p/bea8de3540a5)
- 2017.10 [njvoss299] [afl-unicorn: Fuzzing Arbitrary Binary Code](https://medium.com/p/563ca28936bf)
- 2017.09 [fuzzstation] [Preparing an Application for AFL-Fuzz](https://medium.com/p/a2a838c949cb)
- 2017.09 [fuzzstation] [Breaking Ruby’s Unmarshal with AFL-Fuzz](https://medium.com/p/6b5f72b581d5)
- 2017.09 [fuzzstation] [Fuzz Testing: Choosing a Seed File for AFL](https://medium.com/p/fee4a09753c2)
- 2017.08 [fuzzstation] [Quick-start: Fuzzing with AFL](https://medium.com/p/ac7bb8fcae52)
- 2017.07 [thecyberrecce] [Exploit Development with AFL, PEDA and PwnTools](http://thecyberrecce.net/2017/07/28/exploit-development-with-afl-peda-and-pwntools/)
- 2017.07 [reverse] [How to compile AFL's LLVM mode in OS X](https://reverse.put.as/2017/07/10/compiling-afl-osx-llvm-mode/)
- 2017.06 [pediy] [[原创]afl-fuzz源码情景分析，详细读码笔记，freemind版本和word版本](https://bbs.pediy.com/thread-218671.htm)
- 2017.06 [sensepost] [Fuzzing Apache httpd server with American Fuzzy Lop + persistent mode](https://sensepost.com/blog/2017/fuzzing-apache-httpd-server-with-american-fuzzy-lop-%2B-persistent-mode/)
- 2017.05 [animal0day] [Fuzzing Apache httpd server with American Fuzzy Lop + persistent mode](https://animal0day.blogspot.com/2017/05/fuzzing-apache-httpd-server-with.html)
- 2017.04 [geeknik] [A quick and dirty guide to "Fuzzing with AFL for fun and maybe a little profit"](http://www.geeknik.net/4rzj8nz7n)
- 2017.04 [360] [OpenSSH模糊测试技巧之AFL的妙用（二）](https://www.anquanke.com/post/id/85862/)
- 2017.04 [360] [OpenSSH模糊测试技巧之AFL的妙用（一）](https://www.anquanke.com/post/id/85826/)
- 2017.03 [thecyberrecce] [Software Exploit Development – Fuzzing with AFL](http://thecyberrecce.net/2017/03/20/software-exploit-development-fuzzing-with-afl/)
- 2017.03 [vegardno] [Fuzzing the OpenSSH daemon using AFL](http://www.vegardno.net/2017/03/fuzzing-openssh-daemon-using-afl.html)
- 2017.03 [venus] [在Linux上使用AFL对Stagefright进行模糊测试](https://paper.seebug.org/245/)
- 2017.03 [pediy] [[原创]在Linux上使用AFL对Stagefright进行模糊测试](https://bbs.pediy.com/thread-216319.htm)
- 2017.03 [ele7enxxh] [在Linux上使用AFL对Stagefright进行模糊测试](http://ele7enxxh.com/Use-AFL-For-Stagefright-Fuzzing-On-Linux.html)
- 2017.01 [aurainfosec] [Hunting For Bugs With AFL 101 - A PRIMER](http://research.aurainfosec.io/hunting-for-bugs-101/)
- 2016.09 [ele7enxxh] [使用afl-dyninst fuzz无源码的二进制程序](http://ele7enxxh.com/Use-AFL-dyninst-To-Fuzz-Blackbox-Binaries.html)
- 2016.08 [geeknik] [Fuzzing Perl: A Tale of Two American Fuzzy Lops](http://www.geeknik.net/71nvhf1fp)
- 2016.07 [hackingdistributed] [Graph Databases: Dataflow vs. Traditional Models](http://hackingdistributed.com/2016/07/27/graph-databases-dataflow-vs-traditional/)
- 2016.07 [moyix] [Fuzzing with AFL is an Art](http://moyix.blogspot.com/2016/07/fuzzing-with-afl-is-an-art.html)
- 2016.04 [n0where] [American Fuzzy Lop Utilities: afl-utils](https://n0where.net/american-fuzzy-lop-utilities-afl-utils)
- 2016.02 [theobsidiantower] [AFL](https://theobsidiantower.com/2016/02/22/f7acc32272782740bfb25879781c5512c20a31fb.html)
- 2015.11 [freebuf] [我是如何对dnsmasq使用afl-fuzz差点拯救互联网的？](http://www.freebuf.com/news/85762.html)
- 2015.10 [fuzzing] [Network fuzzing with american fuzzy lop](https://blog.fuzzing-project.org/27-Network-fuzzing-with-american-fuzzy-lop.html)
- 2015.10 [hackingarticles] [Logical Forensics of an Android Device using AFLogical](http://www.hackingarticles.in/logical-forensics-of-an-android-device-using-aflogical/)
- 2015.09 [n0where] [Security Oriented Fuzzer: American Fuzzy Lop](https://n0where.net/security-oriented-fuzzer-american-fuzzy-lop)
- 2015.08 [metaflows] [MetaFlows Announces Virtual Sandboxing in Amazon Cloud: Advanced Feature in MSS Delivers Unlimited Scalability for Sandboxes](https://www.metaflows.com/blog/metaflows-announces-virtual-sandboxing-in-amazon-cloud-advanced-feature-in-mss-delivers-unlimited-scalability-for-sandboxes/)
- 2015.07 [fastly] [How to fuzz a server with American Fuzzy Lop](https://www.fastly.com/blog/how-fuzz-server-american-fuzzy-lop)
- 2015.07 [skullsecurity] [How I nearly almost saved the Internet, starring afl-fuzz and dnsmasq](https://blog.skullsecurity.org/2015/how-i-nearly-almost-saved-the-internet-starring-afl-fuzz-and-dnsmasq)
- 2015.06 [metaflows] [MetaFlows New Packet Data Viewer](https://www.metaflows.com/blog/metaflows-new-packet-data-viewer/)
- 2015.06 [metaflows] [MetaFlows at BlackHat 2015](https://www.metaflows.com/blog/metaflows-at-blackhat-2015/)
- 2015.05 [metaflows] [MetaFlows in the Top-20 Security Companies for 2015](https://www.metaflows.com/blog/metaflows-in-the-top-20-security-companies-for-2015/)
- 2015.04 [evilsocket] [Fuzzing With AFL-Fuzz, a Practical Example ( AFL vs Binutils )](https://www.evilsocket.net/2015/04/30/fuzzing-with-afl-fuzz-a-practical-example-afl-vs-binutils/)
- 2015.04 [alexgaynor] [Introduction to Fuzzing in Python with AFL](https://alexgaynor.net/2015/apr/13/introduction-to-fuzzing-in-python-with-afl/)
- 2015.03 [danluu] [Combining AFL and QuickCheck for directed fuzzing](https://danluu.com/testing/)
- 2015.01 [] [Let's have (not) fun with afl](http://0x90909090.blogspot.com/2015/01/lets-have-not-fun-with-afl.html)
- 2015.01 [] [Let's have some fun with afl](http://0x90909090.blogspot.com/2015/01/lets-have-some-fun-with-afl.html)
- 2015.01 [] [Is fuzzing obsolete? No, afl rocks!](http://0x90909090.blogspot.com/2015/01/is-fuzzing-obsolete-no-afl-rocks.html)
- 2014.12 [metaflows] [MetaFlows: SC Magazine Innovators Hall of Fame](https://www.metaflows.com/blog/metaflows-innovator-hall-of-fame/)
- 2014.08 [toolswatch] [[New Tool] American Fuzzy Lop v0.26b Released](http://www.toolswatch.org/2014/08/new-tool-american-fuzzy-lop-v0-26b-released/)
- 2014.06 [rapid7] [Google Cloud DataFlow – A Game Changer?](https://blog.rapid7.com/2014/06/30/google-cloud-dataflow-a-game-changer/)
- 2012.01 [metaflows] [Payload and Event Reporting by MetaFlows CEO Livio Ricciulli, Part III](https://www.metaflows.com/blog/payload-and-event-reporting-by-metaflows-ceo-livio-ricciulli-part-iii/)
- 2012.01 [metaflows] [MetaFlows Launches Low-cost SaaS Product That Unifies network Security](https://www.metaflows.com/blog/metaflows-launches-low-cost-saas-product-that-unifies-network-security/)
- 2012.01 [metaflows] [MetaFlows Announces Software-Based IDPS, Enables IDPS Hardware for 1/10 the Price](https://www.metaflows.com/blog/metaflows-announces-software-based-idps-enables-idps-hardware-for-110-the-price/)
- 2012.01 [metaflows] [Network Security Performance Tuning by MetaFlows CEO Livio Ricciulli, Part II](https://www.metaflows.com/blog/network-security-performance-tuning-by-metaflows-ceo-livio-ricciulli-part-ii/)
- 2012.01 [metaflows] [Network Security Monitoring Delivered Through a Software as a Service Model by MetaFlows CEO Livio Ricciulli, Part I](https://www.metaflows.com/blog/network-security-monitoring-delivered-through-a-software-as-a-service-model-by-metaflows-ceo-livio-ricciulli-part-i/)
- 2011.07 [yurichev] [27-Jul-2011: Dataflow tracker](https://yurichev.com/blog/65/)
- 2009.11 [metaflows] [MetaFlows Helps Secure Supercomputing 2009](https://www.metaflows.com/blog/metaflows-helps-secure-supercomputing-2009/)
- 2009.08 [metaflows] [MetaFlows Awarded NSF Phase II Grant](https://www.metaflows.com/blog/metaflows-gets-nsf-phase-ii/)
- 2008.07 [sans] [A twist in fluxnet operations. Enter Hydraflux](https://isc.sans.edu/forums/diary/A+twist+in+fluxnet+operations+Enter+Hydraflux/4753/)
- 2005.08 [jeremiahgrossman] [after the GGAFL Grand Finals links](http://blog.jeremiahgrossman.com/2005/08/after-ggafl-grand-finals-links.html)
***
- [**790**星][2y] [C++] [dor1s/libfuzzer-workshop](https://github.com/dor1s/libfuzzer-workshop) Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.
- [**501**星][12d] [Rust] [rust-fuzz/cargo-fuzz](https://github.com/rust-fuzz/cargo-fuzz) libFuzzer的wrapper
- [**251**星][6m] [C] [pagalaxylab/unifuzzer](https://github.com/PAGalaxyLab/uniFuzzer) A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer
- [**142**星][1y] [C++] [guidovranken/libfuzzer-gv](https://github.com/guidovranken/libfuzzer-gv) 加强版 libFuzzer：超快速Fuzzing 的新技巧
- [**58**星][3y] [Shell] [ouspg/libfuzzerfication](https://github.com/ouspg/libfuzzerfication) libfuzzerfication - fuzzing for the rest of us!
- [**58**星][9m] [C++] [mozillasecurity/libfuzzer-python-bridge](https://github.com/mozillasecurity/libfuzzer-python-bridge) A Python3 bridge for implementing custom libFuzzer mutators
- [**3**星][2y] [C] [jcupitt/vips-libfuzzer](https://github.com/jcupitt/vips-libfuzzer) experiment with libfuzzer
- [**1**星][11m] [C++] [butterflyhack/hunspell-crash](https://github.com/butterflyhack/hunspell-crash) find a crash by libfuzzer
- [**0**星][21d] [C++] [rust-fuzz/libfuzzer-sys](https://github.com/rust-fuzz/libfuzzer-sys) ARCHIVED version of rust-fuzz/libfuzzer
- 2019.11 [freebuf] [uniFuzzer：一款基于Unicorn和LibFuzzer的闭源模糊测试工具](https://www.freebuf.com/sectool/216771.html)
- 2019.08 [venus] [基于 Unicorn 和 LibFuzzer 的模拟执行 fuzzing](https://paper.seebug.org/1002/)
- 2019.03 [4hou] [通过libFuzzer实现结构敏感型的模糊测试技术（下）](https://www.4hou.com/technology/16633.html)
- 2019.03 [4hou] [通过libFuzzer实现结构敏感型的模糊测试技术（上）](https://www.4hou.com/technology/16554.html)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 3: LibFuzzer Demonstration](https://www.youtube.com/watch?v=I1bTf42CK6Q)
- 2017.07 [4hou] [一款更快的 libFuzzer：libFuzzer-gv](http://www.4hou.com/tools/6190.html)
- 2017.07 [guidovranken] [libFuzzer-gv: new techniques for dramatically faster fuzzing](https://guidovranken.wordpress.com/2017/07/08/libfuzzer-gv-new-techniques-for-dramatically-faster-fuzzing/)
- 2017.07 [guidovranken] [libFuzzer 介绍](https://guidovranken.com/2017/07/08/libfuzzer-gv-new-techniques-for-dramatically-faster-fuzzing/)
- 2017.07 [geeknik] [Quick and Dirty Guide to Fuzzing V8 with libFuzzer](http://www.geeknik.net/9t76jygu1)
- 2017.01 [da] [Finding Bugs in TensorFlow with LibFuzzer](https://da-data.blogspot.com/2017/01/finding-bugs-in-tensorflow-with.html)
- 2016.12 [insinuator] [TR17 Training: Fuzzing with American Fuzzy Lop, Address Sanitizer and LibFuzzer](https://insinuator.net/2016/12/tr17-training-fuzzing-with-american-fuzzy-lop-address-sanitizer-and-libfuzzer/)
***
- [**323**星][26d] [Py] [mozillasecurity/dharma](https://github.com/mozillasecurity/dharma) Generation-based, context-free grammar fuzzer.
- 2019.02 [aliyun] [用DHARMA实现FUZZ LOGICS](https://xz.aliyun.com/t/4045)
- 2019.01 [zerodayinitiative] [Implementing Fuzz Logics with Dharma](https://www.zerodayinitiative.com/blog/2019/1/31/implementing-fuzz-logics-with-dharma)
***
- [**282**星][10m] [Py] [mozillasecurity/peach](https://github.com/mozillasecurity/peach) Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.
- [**70**星][3y] [C] [payatu/emffuzzer](https://github.com/payatu/emffuzzer) Enhanced Meta File Fuzzer based on Peach Fuzzing Framework
- [**60**星][3y] [Py] [sirusdv/edgehttp2fuzzer](https://github.com/sirusdv/edgehttp2fuzzer) Peach Pit for HTTP/2 Targeting Microsoft Edge
- [**48**星][4m] [Py] [hatriot/peachorchard](https://github.com/hatriot/peachorchard) Peach Fuzzer Web Frontend
- [**44**星][2m] [C] [tidesec/peach_fuzzing](https://github.com/tidesec/peach_fuzzing) 在学习使用peach进行模糊测试时，搜集到的一些不错的资料，以及配套的一些软件或脚本。
- [**39**星][6y] [Py] [proteansec/fuzzyftp](https://github.com/proteansec/fuzzyftp) The FTP fuzzer for Sulley and Peach.
- [**29**星][3y] [Py] [calebstewart/peach](https://github.com/calebstewart/peach) Simple vulnerability scanning framework
- [**25**星][6y] [C#] [isecpartners/peachfarmer](https://github.com/isecpartners/peachfarmer) A log collector for Peach fuzzing in the cloud
- [**3**星][3y] [Py] [o0xmuhe/filefmt_fuzz_with_peach](https://github.com/o0xmuhe/filefmt_fuzz_with_peach)
- [**2**星][1y] [Java] [peachtech/peachapisec-burp](https://github.com/peachtech/peachapisec-burp) Peach API Security Burp Integration
- 2019.11 [freebuf] [使用Peach进行模糊测试从入门到放弃](https://www.freebuf.com/articles/ics-articles/219996.html)
- 2019.11 [freebuf] [Peach原理简介与实战：以Fuzz Web API为例](https://www.freebuf.com/sectool/219584.html)
- 2018.10 [arxiv] [[1810.02066] Turning Lemons into Peaches using Secure Computation](https://arxiv.org/abs/1810.02066)
- 2017.08 [rootedconmadrid] [YIHAN LIAN & ZHIBIN HU - Smarter Peach: Add Eyes to Peach Fuzzer [Rooted CON 2017 - ENG]](https://www.youtube.com/watch?v=tivSuY6rJVg)
- 2017.03 [freebuf] [智能模糊测试工具Peach Fuzzer官方文档翻译](http://www.freebuf.com/sectool/130191.html)
- 2016.12 [duo] [HTTP/2 Peach Pit for Microsoft Edge](https://duo.com/blog/http2-peach-pit-for-microsoft-edge)
- 2016.11 [freebuf] [深入探究文件Fuzz工具之Peach实战](http://www.freebuf.com/sectool/120650.html)
- 2016.08 [myonlinesecurity] [Voice Message from Outside Caller (3m 54s) Peach Telecom delivers #Locky /#Zepto](https://myonlinesecurity.co.uk/voice-message-from-outside-caller-3m-54s-peach-telecom-delivers-locky-zepto/)
- 2016.05 [freebuf] [PitGen：帮你利用010Editor的模板生成对应的Peach PIT](http://www.freebuf.com/sectool/103548.html)
- 2015.12 [freebuf] [工控网络协议模糊测试：用peach对modbus协议进行模糊测试](http://www.freebuf.com/articles/security-management/88249.html)
- 2015.10 [myonlinesecurity] [Invoice 1377 peachsoftware.co.uk – fake PDF malware](https://myonlinesecurity.co.uk/invoice-1377-peachsoftware-co-uk-fake-pdf-malware/)
- 2015.07 [nsfocus] [浅析Peach Fuzz](http://blog.nsfocus.net/peach-fuzz/)
- 2013.07 [pediy] [[原创]文件Fuzz教程之四：Peach Pit模版调试技巧](https://bbs.pediy.com/thread-176419.htm)
- 2013.07 [pediy] [[原创]文件Fuzz教程之三：Peach实战之gif文件格式](https://bbs.pediy.com/thread-176418.htm)
- 2013.07 [pediy] [[原创]文件Fuzz教程之二：Peach语法实战](https://bbs.pediy.com/thread-176417.htm)
- 2013.07 [pediy] [[原创]文件Fuzz教程之一：Peach语法介绍](https://bbs.pediy.com/thread-176416.htm)
- 2011.12 [pediy] [[原创]用peach又发现一个飞秋bug，不知道对不](https://bbs.pediy.com/thread-144446.htm)
- 2011.04 [toolswatch] [Peach The Fuzzing Platform v2.3.8 released](http://www.toolswatch.org/2011/04/peach-the-fuzzing-platform-v2-3-8-released/)
- 2008.11 [trendmicro] [Malware Watch: Obama ‘Impeachment’ Spam](https://blog.trendmicro.com/trendlabs-security-intelligence/malware-watch-obama-impeachment-spam/)
***
- [**25**星][3y] [C] [guilhermeferreira/spikepp](https://github.com/guilhermeferreira/spikepp) SPIKE is a protocol fuzzer creation kit. It provides an API that allows a user to create their own fuzzers for network based protocols using the C++ programming language. The tool defines a number of primitives that it makes available to C coders, which allows it to construct fuzzed messages called “SPIKES” that can be sent to a network service …
- 2018.08 [aliyun] [自动化SPIKE fuzzer](https://xz.aliyun.com/t/2654)
- 2018.08 [aliyun] [使用SPIKE fuzzer挖掘漏洞](https://xz.aliyun.com/t/2652)
- 2017.06 [hackers] [Exploit Development, Part 3: Finding Vulnerabilities by Fuzzing with Spike](https://www.hackers-arise.com/single-post/2017/06/21/Exploit-Development-Part-3-Finding-Vulnerabilities-by-Fuzzing-with-Spike)
- 2011.12 [riusksk] [基于SPIKE的网络协议Fuzzing技术](http://riusksk.me/2011/12/30/spike-fuzz/)
- 2009.05 [pediy] [SPIKE使用总结](https://bbs.pediy.com/thread-89181.htm)
- 2008.07 [pediy] [[技术专题]软件漏洞挖掘之一_SPIKE](https://bbs.pediy.com/thread-68516.htm)
***
- [**548**星][3m] [Py] [shellphish/driller](https://github.com/shellphish/driller) augmenting AFL with symbolic execution!
- [**66**星][3y] [C] [shellphish/driller-afl](https://github.com/shellphish/driller-afl) A version of AFL tailored for Driller's use in analyzing CGC binaries.
- [**13**星][1y] [Py] [cxm95/ida_wrapper](https://github.com/cxm95/ida_wrapper) An IDA_Wrapper for linux, shipped with an Function Identifier. It works well with Driller on static linked binaries.
***
- [**2748**星][7d] [Go] [google/syzkaller](https://github.com/google/syzkaller) 一个unsupervised、以 coverage 为导向的Linux 系统调用fuzzer
- 2019.06 [aliyun] [内核漏洞挖掘技术系列(4)——syzkaller(5)](https://xz.aliyun.com/t/5401)
- 2019.05 [aliyun] [内核漏洞挖掘技术系列(4)——syzkaller(4)](https://xz.aliyun.com/t/5223)
- 2019.05 [aliyun] [内核漏洞挖掘技术系列(4)——syzkaller(3)](https://xz.aliyun.com/t/5154)
- 2019.05 [aliyun] [内核漏洞挖掘技术系列(4)——syzkaller(2)](https://xz.aliyun.com/t/5098)
- 2019.05 [aliyun] [内核漏洞挖掘技术系列(4)——syzkaller(1)](https://xz.aliyun.com/t/5079)
- 2019.04 [OffensiveCon] [OffensiveCon19 - Andrey Konovalov - Coverage-Guided USB Fuzzing with Syzkaller](https://www.youtube.com/watch?v=1MD5JV6LfxA)
- 2017.11 [n0where] [Unsupervised Coverage-Guided Kernel Fuzzer: syzkaller](https://n0where.net/unsupervised-coverage-guided-kernel-fuzzer-syzkaller)
- 2017.08 [freebuf] [Syzkaller：Linux内核模糊测试工具分享](http://www.freebuf.com/sectool/142969.html)
- 2016.08 [vegardno] [Debugging a kernel crash found by syzkaller](http://www.vegardno.net/2016/08/sync-debug.html)
***
- [**4100**星][7d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) 可扩展的Fuzzing基础架构
- 2019.02 [n0where] [Scalable Fuzzing Infrastructure: ClusterFuzz](https://n0where.net/scalable-fuzzing-infrastructure-clusterfuzz)
- 2012.04 [freebuf] [Google为Chrome引入“ClusterFuzz”严酷测试环境](http://www.freebuf.com/news/283.html)
***
- [**4941**星][7d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) 对开源软件进行持续性fuzzing
- [**23**星][2y] [Shell] [aflgo/oss-fuzz](https://github.com/aflgo/oss-fuzz) OSS-Fuzz - integrated with AFLGo for Patch Testing
- 2019.01 [googleblog] [A new chapter for OSS-Fuzz](https://opensource.googleblog.com/2019/01/a-new-chapter-for-oss-fuzz.html)
- 2016.12 [alexgaynor] [OSS-Fuzz initial impressions](https://alexgaynor.net/2016/dec/03/oss-fuzz-initial-impressions/)
***
- [**86**星][2y] [JS] [vspandan/ifuzzer](https://github.com/vspandan/ifuzzer)
***
- [**166**星][3m] [F#] [softsec-kaist/codealchemist](https://github.com/softsec-kaist/codealchemist) Semantics-aware Code Generation for Finding JS engine Vulnerabilities
- 2019.03 [securitygossip] [CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines](https://securitygossip.com/blog/2019/03/15/codealchemist-semantics-aware-code-generation-to-find-vulnerabilities-in-javascript-engines/)
- 2019.03 [sjtu] [CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines](https://loccs.sjtu.edu.cn/gossip/blog/2019/03/15/codealchemist-semantics-aware-code-generation-to-find-vulnerabilities-in-javascript-engines/)
***
- [**1760**星][15d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
- [**165**星][6m] [Rust] [rust-fuzz/honggfuzz-rs](https://github.com/rust-fuzz/honggfuzz-rs) Fuzz your Rust code with Google-developed Honggfuzz !
- 2019.06 [360] [使用honggfuzz挖掘VLC的一个double-free RCE漏洞](https://www.anquanke.com/post/id/181017/)
- 2019.06 [pentestpartners] [Double-Free RCE in VLC. A honggfuzz how-to](https://www.pentestpartners.com/security-blog/double-free-rce-in-vlc-a-honggfuzz-how-to/)
- 2018.11 [pediy] [[原创] honggfuzz漏洞挖掘技术深究系列](https://bbs.pediy.com/thread-247954.htm)
- 2018.10 [riusksk] [honggfuzz漏洞挖掘技术深究系列（5）—— Intel Processor Trace](http://riusksk.me/2018/10/14/honggfuzz5/)
- 2018.10 [riusksk] [honggfuzz漏洞挖掘技术深究系列（4）—— 扩展Fuzzer](http://riusksk.me/2018/10/02/honggfuzz4/)
- 2018.09 [riusksk] [honggfuzz漏洞挖掘技术深究系列（3）——Fuzz策略](http://riusksk.me/2018/09/16/honggfuzz3/)
- 2018.09 [tunnelshade] [Internals of Hongfuzz - Intel PT](https://tunnelshade.in/blog/2018/09/hongfuzz-intel-pt-instrumentation/)
- 2018.08 [riusksk] [honggfuzz漏洞挖掘技术深究系列（2）—— Persistent Fuzzing](http://riusksk.me/2018/08/22/honggfuzz漏洞挖掘技术2/)
- 2018.07 [riusksk] [honggfuzz漏洞挖掘技术深究系列（1）——反馈驱动（Feedback-Driven）](http://riusksk.me/2018/07/29/honggfuzz漏洞挖掘技术1/)
- 2015.06 [n0where] [General Purpose Fuzzing: Honggfuzz](https://n0where.net/general-purpose-fuzzing-honggfuzz)
- 2010.12 [toolswatch] [honggfuzz easy-to-use fuzzer v0.1 released](http://www.toolswatch.org/2010/12/honggfuzz-easy-to-use-fuzzer-v0-1-released/)
***
- [**396**星][8d] [Haskell] [crytic/echidna](https://github.com/crytic/echidna) Ethereum fuzz testing framework
- 2019.09 [freebuf] [Echidna：功能强大的以太坊模糊测试框架](https://www.freebuf.com/articles/blockchain-articles/211940.html)
- 2018.05 [trailofbits] [State Machine Testing with Echidna](https://blog.trailofbits.com/2018/05/03/state-machine-testing-with-echidna/)
- 2018.03 [trailofbits] [echidna介绍](https://blog.trailofbits.com/2018/03/09/echidna-a-smart-fuzzer-for-ethereum/)
***
- [**292**星][1y] [C++] [gamozolabs/applepie](https://github.com/gamozolabs/applepie) A hypervisor for fuzzing built with WHVP and Bochs
- 2019.11 [freebuf] [Applepie：一款整合了WHVP和Bochs的模糊测试工具](https://www.freebuf.com/sectool/214263.html)
***
- [**154**星][9y] [Shell] [spiderlabs/jboss-autopwn](https://github.com/spiderlabs/jboss-autopwn) A JBoss script for obtaining remote shell access
- [**122**星][1y] [Shell] [mi-al/wifi-autopwner](https://github.com/mi-al/wifi-autopwner) script to automate searching and auditing Wi-Fi networks with weak security
- [**97**星][2y] [Py] [danmcinerney/msf-autopwn](https://github.com/danmcinerney/msf-autopwn) Autoexploitation of some of the most common vulnerabilities in wild
- [**89**星][1y] [Shell] [rpranshu/autopwn](https://github.com/rpranshu/autopwn) A simple bash based metasploit automation tool!
- [**84**星][1m] [Ruby] [hahwul/metasploit-autopwn](https://github.com/hahwul/metasploit-autopwn) db_autopwn plugin of metasploit
- [**77**星][1m] [Py] [bannsec/autopwn](https://github.com/bannsec/autopwn) Automate repetitive tasks for fuzzing
- [**26**星][2y] [Py] [danmcinerney/smb-autopwn](https://github.com/danmcinerney/smb-autopwn) Discovers and exploits hosts vulnerable to MS08-067/MS17-010
- [**23**星][5y] [Py] [vnik5287/wpa-autopwn](https://github.com/vnik5287/wpa-autopwn) WPA/WPA2 autopwn script that parses captured handshakes and sends them to the Crackq
- [**11**星][5y] [Shell] [christianpapathanasiou/jboss-autopwn](https://github.com/christianpapathanasiou/jboss-autopwn) JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security
- 2019.07 [freebuf] [autoPwn ：一款功能强大的模糊测试重复执行自动化任务框架](https://www.freebuf.com/sectool/207484.html)
- 2016.01 [evilsocket] [Autopwn Every Android < 4.2 Device on Your Network Using BetterCap and the addJavascriptInterface Vulnerability.](https://www.evilsocket.net/2016/01/18/autopwn-every-android-device-on-your-network-using-bettercap-the-and-addjavascriptinterface-vulnerability/)
- 2015.07 [rapid7] [The New Metasploit Browser Autopwn: Strikes Faster and Smarter - Part 2](https://blog.rapid7.com/2015/07/16/the-new-metasploit-browser-autopwn-strikes-faster-and-smarter-part-2/)
- 2015.07 [rapid7] [The New Metasploit Browser Autopwn: Strikes Faster and Smarter - Part 1](https://blog.rapid7.com/2015/07/15/the-new-metasploit-browser-autopwn-strikes-faster-and-smarter-part-1/)
- 2013.02 [freebuf] [[汉化并修复]渗透测试框架winAUTOPWN v3.2](http://www.freebuf.com/sectool/7451.html)
- 2012.11 [freebuf] [JBOSS服务器渗透测试工具—JBoss Autopwn](http://www.freebuf.com/sectool/6112.html)
- 2012.10 [freebuf] [渗透测试框架（WIN）—winAUTOPWN v3.2 Released](http://www.freebuf.com/sectool/5860.html)
- 2012.04 [pentestlab] [Metasploit Browser Autopwn](https://pentestlab.blog/2012/04/23/metasploit-browser-autopwn/)
- 2011.10 [toolswatch] [winAUTOPWN v2.8 released](http://www.toolswatch.org/2011/10/winautopwn-v2-8-released/)
- 2011.03 [g0tmi1k] [Owning Windows (XP SP3 vs. Metasploit's File_autopwn)](http://blog.g0tmi1k.com/2011/03/owning-windows-xp-sp3-vs/)
- 2011.03 [toolswatch] [winAUTOPWN The Windows AutoHack Tool v2.6 released](http://www.toolswatch.org/2011/03/winautopwn-the-windows-autohack-tool-v2-6-released/)
- 2011.03 [toolswatch] [Pentesting Jboss servers with jboss-autopwn](http://www.toolswatch.org/2011/03/pentesting-jboss-servers-with-jboss-autopwn/)
- 2011.01 [g0tmi1k] [Owning Windows (XP SP2 vs. Metasploit's Browser_autopwn)](http://blog.g0tmi1k.com/2011/01/owning-windows-xp-sp2-vs/)
- 2011.01 [g0tmi1k] [Owning Windows (XP SP1 vs. Metasploit's Db_autopwn)](http://blog.g0tmi1k.com/2011/01/owning-windows-xp-sp1-vs/)
***
- [**3291**星][2m] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) 针对Go包的以覆盖为导向的Fuzzing解决方案
- [**64**星][5m] [Go] [dvyukov/go-fuzz-corpus](https://github.com/dvyukov/go-fuzz-corpus) Corpus for github.com/dvyukov/go-fuzz examples
- 2019.07 [twistlock] [Finding a DoS vulnerability in NATS with go-fuzz – CVE-2019-13126](https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126/)
- 2018.05 [parsiya] [Learning Go-Fuzz 2: goexif2](https://parsiya.net/blog/2018-05-05-learning-go-fuzz-2-goexif2/)
- 2018.04 [parsiya] [Learning Go-Fuzz 1: iprange](https://parsiya.net/blog/2018-04-29-learning-go-fuzz-1-iprange/)
- 2017.07 [mijailovic] [Going down the rabbit hole with go-fuzz](https://mijailovic.net/2017/07/29/go-fuzz/)
- 2015.11 [filippo] ["Automated Testing with go-fuzz" @ GothamGo](https://blog.filippo.io/automated-testing-with-go-fuzz-gothamgo/)
***
- [**938**星][7d] [Py] [swisskyrepo/ssrfmap](https://github.com/swisskyrepo/ssrfmap) Automatic SSRF fuzzer and exploitation tool
- [**39**星][1y] [Ruby] [dreadlocked/ssrfmap](https://github.com/dreadlocked/ssrfmap) Simple Server Side Request Forgery services enumeration tool.
- 2019.03 [freebuf] [SSRFmap：一款功能强大的自动化SSRF模糊测试&漏洞利用工具](https://www.freebuf.com/sectool/197353.html)
***
- [**802**星][8d] [Py] [jtpereyda/boofuzz](https://github.com/jtpereyda/boofuzz) 网络协议Fuzzing框架, sulley的继任者
- 2019.05 [aliyun] [初探BooFuzz](https://xz.aliyun.com/t/5155)
- 2019.01 [doyler] [Boofuzz Introduction – Installation and Basic Usage](https://www.doyler.net/security-not-included/boofuzz-introduction)
- 2017.04 [securestate] [Fuzzing with Boofuzz – Primer](https://warroom.securestate.com/fuzzing-boofuzz-primer/)
- 2017.04 [securestate] [Fuzzing with Boofuzz – Primer](https://warroom.rsmus.com/fuzzing-boofuzz-primer/)
- 2016.01 [n0where] [Network Protocol Fuzzing: boofuzz](https://n0where.net/network-protocol-fuzzing-boofuzz)
- [**1125**星][12m] [Py] [openrce/sulley](https://github.com/openrce/sulley) A pure-python fully automated and unattended fuzzing framework.
- 2019.01 [fuzzysecurity] [Installing Sulley on Windows](http://fuzzysecurity.com/tutorials/10.html)
- 2018.08 [aliyun] [Sulley fuzzer learning---5](https://xz.aliyun.com/t/2612)
- 2018.08 [aliyun] [Sulley fuzzer learning---4](https://xz.aliyun.com/t/2601)
- 2018.08 [aliyun] [Sulley fuzzer learning---3](https://xz.aliyun.com/t/2592)
- 2018.08 [aliyun] [Sulley fuzzer learning---2](https://xz.aliyun.com/t/2575)
- 2018.08 [aliyun] [Sulley fuzzer learning---4](https://xz.aliyun.com/t/2568)
- 2018.08 [aliyun] [Sulley fuzzer learning---3](https://xz.aliyun.com/t/2566)
- 2018.08 [aliyun] [Sulley fuzzer learning---2](https://xz.aliyun.com/t/2565)
- 2018.08 [aliyun] [Sulley fuzzer learning---1](https://xz.aliyun.com/t/2564)
- 2014.08 [3xp10it] [quick start sulley](http://3xp10it.cc/%E4%BA%8C%E8%BF%9B%E5%88%B6/2016/07/28/quick-start-sulley/)
- 2014.08 [3xp10it] [quick start sulley](http://3xp10it.cc/%E4%BA%8C%E8%BF%9B%E5%88%B6/2016/07/28/quick-start-sulley/)
- 2013.05 [htbridge] [Fuzzing: An introduction to Sulley Framework](https://www.htbridge.com/blog/fuzzing_an_introduction_to_sulley_framework.html)
- 2011.06 [pediy] [[翻译]sulley 网络协议Fuzzing 测试文档](https://bbs.pediy.com/thread-135764.htm)
- 2008.12 [pediy] [[原创]利用sulley framework进行简单的漏洞挖掘](https://bbs.pediy.com/thread-78978.htm)
***
- [**1123**星][2y] [aoh/radamsa](https://github.com/aoh/radamsa) a general-purpose fuzzer
- [**122**星][2y] [Py] [blazeinfosec/pcrappyfuzzer](https://github.com/blazeinfosec/pcrappyfuzzer) Scapy+ radamsa 的简单组合，从 pcap 文件中提取数据，执行快速 Fuzz
- [**71**星][2y] [Java] [ikkisoft/bradamsa](https://github.com/ikkisoft/bradamsa) Burp Suite extension to generate Intruder payloads using Radamsa
- [**52**星][1m] [C] [anestisb/radamsa-android](https://github.com/anestisb/radamsa-android) An Android port of radamsa fuzzer
- [**43**星][8m] [Erlang] [darkkey/erlamsa](https://github.com/darkkey/erlamsa) Erlang port of famous radamsa fuzzzer.
- [**40**星][1y] [scheme] [aki helin/radamsa](https://gitlab.com/akihe/radamsa) a general-purpose fuzzer
- [**19**星][7y] [raz0r/burp-radamsa](https://github.com/raz0r/burp-radamsa) Radamsa fuzzer extension for Burp Suite
- [**8**星][2y] [Py] [lokori/heartbreaker](https://github.com/lokori/heartbreaker) HeartBreaker, GUI for Radamsa
- [**6**星][12d] [Java] [nscuro/bradamsa-ng](https://github.com/nscuro/bradamsa-ng) Burp Suite extension for Radamsa-powered fuzzing with Intruder
- [**0**星][1m] [TS] [rarecoil/sinkdweller](https://github.com/rarecoil/sinkdweller) A TypeScript-based frontend to the radamsa fuzzer. No dependencies on most platforms.
- 2017.07 [pediy] [[翻译]凭借Scapy, radamsa工具和少量明文数据包对专有协议进行Fuzzing测试](https://bbs.pediy.com/thread-219994.htm)
- 2016.11 [n0where] [What the Fuzz: Radamsa](https://n0where.net/what-the-fuzz-radamsa)
- 2016.05 [n0where] [General Purpose Fuzzer: Radamsa](https://n0where.net/general-purpose-fuzzer-radamsa)
- 2013.06 [raz0r] [Radamsa Fuzzer Extension for Burp Suite](https://raz0r.name/releases/burp-radamsa/)
***
- [**1337**星][19d] [Go] [ffuf/ffuf](https://github.com/ffuf/ffuf) Fast web fuzzer written in Go
- 2019.12 [hakin9] [Ffuf - A fast web fuzzer written in Go](https://hakin9.org/ffuf-a-fast-web-fuzzer-written-in-go/)
***
- [**1112**星][2m] [Py] [googleprojectzero/domato](https://github.com/googleprojectzero/domato) ProjectZero 开源的 DOM fuzzer
- 2017.09 [googleprojectzero] [domato 介绍](https://googleprojectzero.blogspot.com/2017/09/the-great-dom-fuzz-off-of-2017.html)
***
- [**788**星][22d] [HTML] [tennc/fuzzdb](https://github.com/tennc/fuzzdb) 一个fuzzdb扩展库
- [**227**星][2y] [Py] [euphrat1ca/fuzzdb-collect](https://github.com/euphrat1ca/fuzzdb-collect) 集合github平台上的安全行业从业者自研开源扫描器的仓库，包括子域名枚举、数据库漏洞扫描、弱口令或信息泄漏扫描、端口扫描、指纹识别以及其他大型扫描器或模块化扫描器
- [**102**星][4y] [yoojinl/fuzzdb](https://github.com/yoojinl/fuzzdb) Use
- [**81**星][2y] [PHP] [nixawk/fuzzdb](https://github.com/nixawk/fuzzdb) Web Fuzzing Discovery and Attack Pattern Database
- [**27**星][5y] [HTML] [infosec-au/fuzzdb](https://github.com/infosec-au/fuzzdb) Automatically exported from code.google.com/p/fuzzdb
- 2016.01 [n0where] [Open Source Database Fuzzing: FuzzDB](https://n0where.net/open-source-database-fuzzing-fuzzdb)
- 2014.04 [freebuf] [使用fuzzDB进行web安全测试](http://www.freebuf.com/articles/web/31076.html)
- 2013.08 [freebuf] [Mozilla推出FuzzDB，安全测试用例数据库](http://www.freebuf.com/articles/database/11986.html)
- 2012.11 [freebuf] [渗透测试神器Burp弹药扩充-fuzzdb](http://www.freebuf.com/sectool/6181.html)
- 2011.08 [raz0r] [FuzzDB – умный фаззинг](https://raz0r.name/obzory/fuzzdb-smart-fuzzing/)
***
- [**809**星][3y] [Py] [fuzzbunch/fuzzbunch](https://github.com/fuzzbunch/fuzzbunch) NSA finest tool
- [**122**星][3m] [Py] [mdiazcl/fuzzbunch-debian](https://github.com/mdiazcl/fuzzbunch-debian) Fuzzbunch deployment for Debian - Intructions: Readme.md
- [**80**星][2y] [Py] [peterpt/fuzzbunch](https://github.com/peterpt/fuzzbunch) Shadow Brokers NSA fuzzbunch tool leak . With windows auto instalation script
- [**58**星][3y] [Py] [nopernik/fuzzbunch_wrapper](https://github.com/nopernik/fuzzbunch_wrapper) Fuzzbunch Python-Wine wrapper
- [**39**星][3y] [Py] [exploitx3/fuzzbunch](https://github.com/exploitx3/fuzzbunch) FUZZBUNCH - NSA security tools
- [**27**星][3y] [Py] [3gstudent/fuzzbunch](https://github.com/3gstudent/fuzzbunch) NSA finest tool
- [**1**星][2y] [Ruby] [peterpt/pipe_auditor_fb](https://github.com/peterpt/pipe_auditor_fb) pipe auditor for smb from metasploit framework with fuzzbunch pipe name list
- 2018.11 [zerosum0x0] [查找永恒之蓝客户端(FuzzBunch)未能在我的XP实验机执行成功的原因, 发现了个永恒之蓝客户端的Bug](https://zerosum0x0.blogspot.com/2018/11/dissecting-bug-in-eternalblue-client.html)
- 2018.06 [zerosum0x0] [解析方程式公开的永恒浪漫(EternalRomance)客户端中的bug](https://zerosum0x0.blogspot.com/2018/06/dissecting-bug-in-eternalromance-client.html)
- 2017.05 [aliyun] [NSAFuzzbunch中EaseBee利用方法研究及MDaemon漏洞分析](https://xz.aliyun.com/t/175)
- 2017.05 [topsec] [NSA Fuzzbunch中EaseBee利用方法研究及MDaemon漏洞分析](http://blog.topsec.com.cn/ad_lab/nsa-fuzzbunch%e4%b8%adeasebee%e5%88%a9%e7%94%a8%e6%96%b9%e6%b3%95%e7%a0%94%e7%a9%b6%e5%8f%8amdaemon%e6%bc%8f%e6%b4%9e%e5%88%86%e6%9e%90/)
- 2017.05 [0x00sec] [Porting the leaked Equation Group (EQGRP) "Fuzzbunch" tool to Linux](https://0x00sec.org/t/porting-the-leaked-equation-group-eqgrp-fuzzbunch-tool-to-linux/1956/)
- 2017.04 [freebuf] [NSA Fuzzbunch中EternalRomance工具复现过程](http://www.freebuf.com/articles/system/132879.html)
- 2017.04 [360] [NSA泄露黑客工具之 FuzzBunch & DanderSpritz 分析](https://www.anquanke.com/post/id/85911/)
***
- [**536**星][2m] [C++] [angorafuzzer/angora](https://github.com/angorafuzzer/angora) Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
- [**28**星][1y] [Shell] [angorafuzzer/fuzzingrealprogrambenchstatistics](https://github.com/angorafuzzer/fuzzingrealprogrambenchstatistics) List the real world programs evaluated in fuzzing papers.
- 2019.01 [securitygossip] [Angora: Efficient Fuzzing by Principled Search](https://securitygossip.com/blog/2019/01/03/angora-efficient-fuzzing-by-principled-search/)
- 2019.01 [sjtu] [Angora: Efficient Fuzzing by Principled Search](https://loccs.sjtu.edu.cn/gossip/blog/2019/01/03/angora-efficient-fuzzing-by-principled-search/)
- 2018.03 [arxiv] [Angora Fuzzing: 通过解决路径约束提高分支覆盖率, 无需符号执行, 效率远超现有主流Fuzzing技术(基于符号执行:慢;随机产生输入:难以生成高质量的输入)](https://arxiv.org/abs/1803.01307)
***
- [**2521**星][8d] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
- 2019.04 [HackerSploit] [Bug Bounty Hunting - Wfuzz - Web Content Discovery & Form Manipulation](https://www.youtube.com/watch?v=1Do5VjeEVjg)
- 2018.06 [freebuf] [Web模糊测试：WFuzz的坑和快速入门](http://www.freebuf.com/sectool/173746.html)
- 2017.09 [n0where] [Bruteforcing Web Applications: Wfuzz](https://n0where.net/bruteforcing-web-applications-wfuzz)
- 2017.08 [arxiv] [[1708.08437] SlowFuzz: Automated Domain-Independent Detection of Algorithmic Complexity Vulnerabilities](https://arxiv.org/abs/1708.08437)
- 2017.02 [toolswatch] [Wfuzz v2.2 – Web Bruteforcer](http://www.toolswatch.org/2017/02/wfuzz-v2-2-web-bruteforcer/)
- 2016.06 [freebuf] [Wfuzz：一款强大的Web Fuzz测试工具](http://www.freebuf.com/sectool/106147.html)
- 2011.08 [toolswatch] [Black Hat USA 2011: ToolsTube with Christian Martorella on WFuzz & WebSlayer v2.0](http://www.toolswatch.org/2011/08/black-hat-usa-2011-toolstube-with-christian-martorella-on-wfuzz-webslayer-v2-0/)
***
- [**603**星][1m] [Py] [marin-m/pbtk](https://github.com/marin-m/pbtk) A toolset for reverse engineering and fuzzing Protobuf-based apps
- 2019.12 [freebuf] [PBTK：一款针对Protobuf App的逆向工程与模糊测试套件](https://www.freebuf.com/articles/system/223128.html)
***
- [**385**星][3y] [Ruby] [stephenfewer/grinder](https://github.com/stephenfewer/grinder) Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.
- [**54**星][1m] [Py] [sdnewhop/grinder](https://github.com/sdnewhop/grinder)
- [**4**星][7y] [Perl] [cyberisltd/accessgrinder](https://github.com/cyberisltd/accessgrinder) A Perl script to test access controls on large web applications
- 2016.05 [freebuf] [从零开始学Fuzzing系列：带领nduja突破Grinder的壁垒](http://www.freebuf.com/articles/web/105510.html)
***
- [**4113**星][2y] [Py] [xoreaxeaxeax/sandsifter](https://github.com/xoreaxeaxeax/sandsifter) x86 处理器 Fuzzer，查找 Intel 的隐藏指令和 CPU bug
- [**242**星][2y] [Py] [battelle/sandsifter](https://github.com/battelle/sandsifter) The x86 processor fuzzer
- [**27**星][21d] [C++] [blitz/baresifter](https://github.com/blitz/baresifter) A bare-metal x86 instruction set fuzzer a la Sandsifter
- [**17**星][6m] [Py] [rigred/sandsifter](https://github.com/rigred/sandsifter) The x86 processor fuzzer
- 2018.10 [freebuf] [Sandsifter：一款专门针对X86处理器的模糊测试工具](https://www.freebuf.com/sectool/187237.html)
- 2018.08 [n0where] [The x86 Processor Fuzzer: sandsifter](https://n0where.net/the-x86-processor-fuzzer-sandsifter)
***
- [**501**星][7d] [Py] [trailofbits/deepstate](https://github.com/trailofbits/deepstate) A unit test-like interface for fuzzing and symbolic execution
- [**5**星][3m] [C] [agroce/testfs](https://github.com/agroce/testfs) DeepState testing for TestFS, a user level toy file system that is similar to ext3
- [**4**星][8m] [C++] [agroce/testleveldb](https://github.com/agroce/testleveldb) DeepState testing for levelDB
- [**2**星][8m] [C] [agroce/rb_tree_demo](https://github.com/agroce/rb_tree_demo) DeepState version of code accompanying a blog post about fuzzing a red-black tree implementation:
- [**0**星][27d] [C++] [trailofbits/deepstate-test-suite](https://github.com/trailofbits/deepstate-test-suite) Automated continuous testing integration using DeepState
- 2019.09 [trailofbits] [DeepState Now Supports Ensemble Fuzzing](https://blog.trailofbits.com/2019/09/03/deepstate-now-supports-ensemble-fuzzing/)
- 2019.05 [trailofbits] [Fuzzing Unit Tests with DeepState and Eclipser](https://blog.trailofbits.com/2019/05/31/fuzzing-unit-tests-with-deepstate-and-eclipser/)
- 2019.04 [4hou] [使用DeepState对API进行模糊测试（下）](https://www.4hou.com/web/16891.html)
- 2019.03 [4hou] [使用DeepState对API进行模糊测试（上）](https://www.4hou.com/web/16866.html)
- 2019.01 [trailofbits] [Fuzzing an API with DeepState (Part 2)](https://blog.trailofbits.com/2019/01/23/fuzzing-an-api-with-deepstate-part-2/)
- 2019.01 [trailofbits] [Fuzzing an API with DeepState (Part 1)](https://blog.trailofbits.com/2019/01/22/fuzzing-an-api-with-deepstate-part-1/)
***
- [**647**星][1m] [C] [kernelslacker/trinity](https://github.com/kernelslacker/trinity) Linux system call fuzzer
- 2019.04 [aliyun] [内核fuzz技术系列(1)——trinity](https://xz.aliyun.com/t/4760)
- 2017.07 [pediy] [[原创]移植Trinity对android system call进行fuzz](https://bbs.pediy.com/thread-218969.htm)
- 2016.01 [n0where] [Linux System Call Fuzzer: Trinity](https://n0where.net/trinity-linux-system-call-fuzzer)
***
- [**484**星][4m] [Py] [netzob/netzob](https://github.com/netzob/netzob) 通信协议逆向、建模和模糊测试
- 2017.02 [360] [使用Netzob逆向未知协议](https://www.anquanke.com/post/id/85441/)
- 2017.02 [n0where] [Reverse Engineering Communication Protocols: Netzob](https://n0where.net/reverse-engineering-communication-protocols-netzob)
- 2015.11 [amossys] [Tutorial: How to reverse unknown protocols using Netzob](http://blog.amossys.fr/How_to_reverse_unknown_protocols_using_Netzob.html)
- 2012.05 [freebuf] [逆向模拟通信工具-netzob 0.3.2](http://www.freebuf.com/sectool/1439.html)
***
- [**350**星][13d] [Jupyter Notebook] [uds-se/fuzzingbook](https://github.com/uds-se/fuzzingbook) The Book "Generating Software Tests"
***
- [**4046**星][4m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) 通过动态App安全测试来查找App安全漏洞, 算是不带扫描器的漏洞扫描器
- [**1552**星][21d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
- [**506**星][1y] [Py] [c0ny1/upload-fuzz-dic-builder](https://github.com/c0ny1/upload-fuzz-dic-builder) 上传漏洞fuzz字典生成脚本
- [**205**星][3y] [tuuunya/fuzz_dict](https://github.com/TuuuNya/fuzz_dict) 常用的一些fuzz及爆破字典，欢迎大神继续提供新的字典及分类。
- [**115**星][1m] [3had0w/fuzzing-dicts](https://github.com/3had0w/Fuzzing-Dicts) Web Security Dictionary
- [**56**星][3y] [Py] [test-pipeline/orthrus](https://github.com/test-pipeline/orthrus) A tool to manage, conduct, and assess dictionary-based fuzz testing
- [**3**星][6m] [c1h2e1/myfuzzingdict](https://github.com/c1h2e1/myfuzzingdict)
***
- [**22709**星][14d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) 多种类型资源收集：用户名、密码、URL、敏感数据类型、Fuzzing Payload、WebShell等
- [**2959**星][1m] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
- [**2721**星][19d] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) Linux 内核 Fuzz 和漏洞利用的资源收集
- [**511**星][27d] [Py] [mozillasecurity/funfuzz](https://github.com/mozillasecurity/funfuzz) 用于测试SpiderMonkey JavaScript引擎的fuzzer集合
- [**379**星][5m] [lcatro/source-and-fuzzing](https://github.com/lcatro/Source-and-Fuzzing) 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
- [**247**星][8d] [cpuu/awesome-fuzzing](https://github.com/cpuu/awesome-fuzzing) A curated list of awesome Fuzzing(or Fuzz Testing) for software security
- [**235**星][12d] [CSS] [7dog7/bottleneckosmosis](https://github.com/7dog7/bottleneckosmosis) 瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf
- [**219**星][28d] [shogunlab/awesome-hyper-v-exploitation](https://github.com/shogunlab/awesome-hyper-v-exploitation) A curated list of Hyper-V exploitation resources, fuzzing and vulnerability research.
- [**213**星][2y] [k0keoyo/some-kernel-fuzzing-paper](https://github.com/k0keoyo/some-kernel-fuzzing-paper) Some kernel fuzzing paper about windows and linux
- [**149**星][3m] [bin2415/fuzzing_paper](https://github.com/bin2415/fuzzing_paper) Fuzzing相关论文
- [**123**星][2m] [HTML] [mozillasecurity/fuzzmanager](https://github.com/mozillasecurity/fuzzmanager) A fuzzing management tools collection
- [**36**星][1m] [C] [atrosinenko/kbdysch](https://github.com/atrosinenko/kbdysch) A collection of user-space Linux kernel specific guided fuzzers based on LKL
- [**11**星][2y] [dictionaryhouse/sql-injection-fuzzpayload-collection](https://github.com/dictionaryhouse/sql-injection-fuzzpayload-collection) Sql-injection FuzzPayload 集合
***
- [**703**星][12d] [Go] [google/gofuzz](https://github.com/google/gofuzz) Fuzz testing for go.
- [**449**星][5m] [Perl] [wireghoul/dotdotpwn](https://github.com/wireghoul/dotdotpwn) DotDotPwn - The Directory Traversal Fuzzer
- [**419**星][2y] [Ruby] [fuzzapi/fuzzapi](https://github.com/Fuzzapi/fuzzapi) Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
- [**385**星][20d] [Rust] [microsoft/lain](https://github.com/microsoft/lain) A fuzzer framework built in Rust
- [**378**星][21d] [C++] [sslab-gatech/qsym](https://github.com/sslab-gatech/qsym) A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
- [**360**星][5m] [C++] [googleprojectzero/brokentype](https://github.com/googleprojectzero/BrokenType) TrueType and OpenType font fuzzing toolset
- [**355**星][12d] [Java] [google/graphicsfuzz](https://github.com/google/graphicsfuzz) A testing framework for automatically finding and simplifying bugs in graphics shader compilers.
- [**335**星][3y] [Shell] [0xm3r/cgpwn](https://github.com/0xm3r/cgpwn) A lightweight VM for hardware hacking, RE (fuzzing, symEx, exploiting etc) and wargaming tasks
- [**320**星][12m] [Py] [cisco-sas/kitty](https://github.com/cisco-sas/kitty) Fuzzing framework written in python
- [**311**星][11d] [HTML] [mozillasecurity/fuzzdata](https://github.com/mozillasecurity/fuzzdata) Fuzzing resources for feeding various fuzzers with input.
- [**310**星][2y] [Py] [ioactive/xdiff](https://github.com/ioactive/xdiff) Extended Differential Fuzzing Framework
- [**307**星][1y] [Py] [mseclab/pyjfuzz](https://github.com/mseclab/pyjfuzz) PyJFuzz - Python JSON Fuzzer
- [**296**星][2y] [Py] [orangetw/tiny-url-fuzzer](https://github.com/orangetw/tiny-url-fuzzer) A tiny and cute URL fuzzer
- [**281**星][14d] [Py] [tomato42/tlsfuzzer](https://github.com/tomato42/tlsfuzzer) SSL and TLS protocol test suite and fuzzer
- [**278**星][1y] [C++] [dekimir/ramfuzz](https://github.com/dekimir/ramfuzz) Combining Unit Tests, Fuzzing, and AI
- [**257**星][3y] [Mask] [lcatro/fuzzing-imagemagick](https://github.com/lcatro/fuzzing-imagemagick) OpenSource My ImageMagick Fuzzer ..
- [**250**星][4y] [Py] [census/choronzon](https://github.com/census/choronzon) An evolutionary knowledge-based fuzzer
- [**234**星][8d] [JS] [andreafioraldi/frida-fuzzer](https://github.com/andreafioraldi/frida-fuzzer) This experimetal fuzzer is meant to be used for API in-memory fuzzing.
- [**226**星][14d] [PHP] [nikic/php-fuzzer](https://github.com/nikic/php-fuzzer) Experimental fuzzer for PHP libraries
- [**219**星][5m] [C++] [lifting-bits/grr](https://github.com/lifting-bits/grr) High-throughput fuzzer and emulator of DECREE binaries
- [**211**星][20d] [C++] [google/libprotobuf-mutator](https://github.com/google/libprotobuf-mutator) Library for structured fuzzing with protobuffers
- [**202**星][5m] [C++] [mc-imperial/jfs](https://github.com/mc-imperial/jfs) an experimental constraint solverdesigned to investigate using coverage guided fuzzing as an incomplete strategyfor solving boolean, BitVector, and floating-point constraints.
- [**199**星][11d] [Java] [rohanpadhye/jqf](https://github.com/rohanpadhye/jqf) JQF + Zest: Coverage-guided semantic fuzzing for Java.
- [**196**星][28d] [OCaml] [bitblaze-fuzzball/fuzzball](https://github.com/bitblaze-fuzzball/fuzzball) Vine-based Binary Symbolic Execution
- [**196**星][4m] [C#] [jakobbotsch/fuzzlyn](https://github.com/jakobbotsch/fuzzlyn) Fuzzer for the .NET toolchains, developed as a project for the 2018 Language-Based Security course at Aarhus University.
- [**190**星][21d] [Py] [certcc/certfuzz](https://github.com/certcc/certfuzz) This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).
- [**189**星][12m] [Haskell] [cifasis/quickfuzz](https://github.com/cifasis/quickfuzz) An experimental grammar fuzzer in Haskell using QuickCheck
- [**186**星][1y] [Py] [hexhive/t-fuzz](https://github.com/hexhive/t-fuzz) a fuzzing tool based on program transformation, and a tool that verifies whether crashes found transformed programs are true bugs in the original program or not (coming soon).
- [**181**星][3y] [Ruby] [fuzzapi/api-fuzzer](https://github.com/fuzzapi/api-fuzzer) API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
- [**180**星][2y] [Py] [tr3jer/dnsautorebinding](https://github.com/tr3jer/dnsautorebinding) ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
- [**173**星][1m] [Py] [d0c-s4vage/gramfuzz](https://github.com/d0c-s4vage/gramfuzz) gramfuzz is a grammar-based fuzzer that lets one define complex grammars to generate text and binary data formats.
- [**170**星][4m] [Py] [lc/theftfuzzer](https://github.com/lc/theftfuzzer) TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
- [**166**星][26d] [Py] [walkerfuz/morph](https://github.com/walkerfuz/morph) An open source fuzzing framework for fun.
- [**165**星][1m] [Java] [fuzzitdev/javafuzz](https://github.com/fuzzitdev/javafuzz) coverage guided fuzz testing for java
- [**162**星][2y] [Py] [alephsecurity/abootool](https://github.com/alephsecurity/abootool) 基于静态知识（从bootloader 镜像中提取的字符串）动态 fuzz 隐藏的 fastboot OEM 指令
- [**154**星][14d] [Py] [renatahodovan/fuzzinator](https://github.com/renatahodovan/fuzzinator) Fuzzinator Random Testing Framework
- [**152**星][5m] [Py] [trailofbits/protofuzz](https://github.com/trailofbits/protofuzz) Google Protocol Buffers message generator
- [**147**星][22d] [C] [grimm-co/killerbeez](https://github.com/grimm-co/killerbeez) A distributed fuzzer which aims to pull in the best technologies, make them play nicely together, and run on multiple O/Ses.
- [**143**星][2y] [Py] [julieeen/kleefl](https://github.com/julieeen/kleefl) 结合了符号执行的Fuzzer，针对普通 C/C++ 应用程序
- [**142**星][3y] [Java] [chora10/fuzzdomain](https://github.com/chora10/fuzzdomain) FuzzDomain
- [**138**星][12m] [Rust] [shnatsel/libdiffuzz](https://github.com/shnatsel/libdiffuzz) Custom memory allocator that helps discover reads from uninitialized memory
- [**138**星][3m] [Rust] [gamozolabs/fzero_fuzzer](https://github.com/gamozolabs/fzero_fuzzer) A fast Rust-based safe and thead-friendly grammar-based fuzz generator
- [**137**星][3m] [Go] [fuzzitdev/fuzzit](https://github.com/fuzzitdev/fuzzit) CLI to integrate continuous fuzzing with Fuzzit
- [**136**星][17d] [Py] [fuzzitdev/pythonfuzz](https://github.com/fuzzitdev/pythonfuzz) coverage guided fuzz testing for python
- [**134**星][3y] [C++] [nezha-dt/nezha](https://github.com/nezha-dt/nezha) 高效的domain-independent differential fuzzer
- [**131**星][4m] [Py] [chrispetrou/fdsploit](https://github.com/chrispetrou/fdsploit) File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
- [**125**星][4m] [Go] [yahoo/yfuzz](https://github.com/yahoo/yfuzz) 利用 Kubernetes 实现分布式 fuzzing
- [**124**星][10m] [Rust] [rub-syssec/nautilus](https://github.com/rub-syssec/nautilus) a grammar based feedback fuzzer
- [**123**星][2y] [Py] [riverloopsec/tumblerf](https://github.com/riverloopsec/tumblerf) a unified fuzzing framework for low-level RF and HW protocol/PHY/MAC analysis
- [**120**星][8y] [C] [cr4sh/ioctlfuzzer](https://github.com/cr4sh/ioctlfuzzer) Automatically exported from code.google.com/p/ioctlfuzzer
- [**120**星][1y] [C] [zombiecraig/uds-server](https://github.com/zombiecraig/uds-server) CAN UDS Simulator and Fuzzer
- [**119**星][3y] [Py] [nccgroup/hodor](https://github.com/nccgroup/hodor) Hodor! Fuzzer..
- [**119**星][22d] [C] [rohanpadhye/fuzzfactory](https://github.com/rohanpadhye/fuzzfactory) Domain-Specific Fuzzing with Waypoints
- [**115**星][5y] [JS] [demi6od/chromefuzzer](https://github.com/demi6od/chromefuzzer) fuzz
- [**113**星][6y] [Py] [nccgroup/zulu](https://github.com/nccgroup/zulu) The Zulu fuzzer
- [**108**星][3y] [JS] [attekett/nodefuzz](https://github.com/attekett/nodefuzz)
- [**108**星][3y] [JS] [sensepost/wadi](https://github.com/sensepost/wadi) Wadi Fuzzing Harness
- [**107**星][5y] [C] [ioactive/melkor_elf_fuzzer](https://github.com/ioactive/melkor_elf_fuzzer) Melkor is a very intuitive and easy-to-use ELF file format fuzzer to find functional and security bugs in ELF parsers.
- [**107**星][4y] [C] [rootkitsmm/win32k-fuzzer](https://github.com/rootkitsmm/win32k-fuzzer) Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )
- [**105**星][5y] [Py] [fooying/3102](https://github.com/fooying/3102) A domain/ip fuzzing tool for vulnerability mining
- [**101**星][26d] [Rust] [loiclec/fuzzcheck-rs](https://github.com/loiclec/fuzzcheck-rs) Structure-aware, in-process, coverage-guided, evolutionary fuzzing engine for Rust functions.
- [**101**星][1y] [C] [x41sec/x41-smartcard-fuzzing](https://github.com/x41sec/x41-smartcard-fuzzing) X41 Smartcard Fuzzer
- [**99**星][3m] [C++] [oxagast/ansvif](https://github.com/oxagast/ansvif) A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.
- [**96**星][3y] [PHP] [jas502n/fuzz-wooyun-org](https://github.com/jas502n/fuzz-wooyun-org) WooYun Fuzz 库
- [**96**星][8m] [Py] [localh0t/backfuzz](https://github.com/localh0t/backfuzz) protocol fuzzing toolkit
- [**95**星][7d] [C] [guidovranken/cryptofuzz](https://github.com/guidovranken/cryptofuzz)
- [**95**星][4m] [Py] [demantz/frizzer](https://github.com/demantz/frizzer) Frida-based general purpose fuzzer
- [**94**星][2m] [JS] [mozillasecurity/octo](https://github.com/mozillasecurity/octo) A fuzzing library in JavaScript.
- [**87**星][2y] [Py] [andresriancho/jwt-fuzzer](https://github.com/andresriancho/jwt-fuzzer) JWT fuzzer
- [**87**星][5y] [C++] [piscou/fuzzwin](https://github.com/piscou/fuzzwin)
- [**86**星][27d] [JS] [fgsect/fexm](https://github.com/fgsect/fexm) Automated fuzzing framework
- [**86**星][3m] [C++] [vusec/vuzzer64](https://github.com/vusec/vuzzer64) This implements a 64-bit version of vusec/vuzzer fuzzing tool.
- [**81**星][4y] [Py] [cifasis/neural-fuzzer](https://github.com/cifasis/neural-fuzzer) an experimental fuzzer designed to use state-of-the-art Machine Learning to learn from a set of initial files
- [**81**星][3y] [Py] [coffeehb/ocift](https://github.com/coffeehb/ocift) 一个半自动化命令注入漏洞Fuzz工具(One Semi-automation command injection vulnerability Fuzz tool)
- [**81**星][7d] [C] [trailofbits/mishegos](https://github.com/trailofbits/mishegos) A differential fuzzer for x86 decoders
- [**78**星][2y] [Py] [softsec-kaist/imf](https://github.com/softsec-kaist/imf) Inferred Model-based Fuzzer
- [**77**星][20d] [Rust] [phayes/sidefuzz](https://github.com/phayes/sidefuzz) Fuzzer to automatically find side-channel (timing) vulnerabilities
- [**73**星][2y] [Ruby] [dyjakan/interpreter-bugs](https://github.com/dyjakan/interpreter-bugs) Fuzzing results for various interpreters.
- [**73**星][10m] [C++] [niklasb/bspfuzz](https://github.com/niklasb/bspfuzz)
- [**72**星][4y] [C] [rcvalle/vmmfuzzer](https://github.com/rcvalle/vmmfuzzer) A hypervisor or virtual machine monitor (VMM) fuzzer.
- [**72**星][2m] [motherfuzzers/meetups](https://github.com/motherfuzzers/meetups) Materials from Fuzzing Bay Area meetups
- [**71**星][3y] [JS] [attekett/surku](https://github.com/attekett/surku) Surku is a general-purpose mutation-based fuzzer.
- [**70**星][10m] [Go] [mmcloughlin/cryptofuzz](https://github.com/mmcloughlin/cryptofuzz) Fuzzing Go crypto
- [**68**星][1y] [ObjC] [alexdenisov/fuzzer](https://github.com/alexdenisov/fuzzer) Do not crash when your server lies
- [**67**星][2y] [Py] [debasishm89/openxmolar](https://github.com/debasishm89/openxmolar) A MS OpenXML Format Fuzzing Framework
- [**67**星][28d] [Rust] [trailofbits/siderophile](https://github.com/trailofbits/siderophile) Find the ideal fuzz targets in a Rust codebase
- [**64**星][4y] [Py] [halit/isip](https://github.com/halit/isip) Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks.
- [**64**星][4y] [Py] [halit/isip](https://github.com/halit/isip) Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks.
- [**61**星][1y] [Py] [cisco-sas/katnip](https://github.com/cisco-sas/katnip) Extension library for the Kitty fuzzing framework
- [**61**星][2y] [wtsxdev/fuzzing-resources](https://github.com/wtsxdev/fuzzing-resources) List of fuzzing resources for learning Fuzzing and initial phases of Exploit Development like root cause analysis
- [**60**星][2y] [JS] [monkeym4ster/domainfuzz](https://github.com/monkeym4ster/domainfuzz) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
- [**59**星][1m] [C] [rub-syssec/antifuzz](https://github.com/rub-syssec/antifuzz) Impeding Fuzzing Audits of Binary Executables
- [**58**星][14d] [JS] [softsec-kaist/fuzzing-survey](https://github.com/softsec-kaist/fuzzing-survey) The Art, Science, and Engineering of Fuzzing: A Survey
- [**57**星][2y] [ouspg/fuzz-testing-beginners-guide](https://github.com/ouspg/fuzz-testing-beginners-guide) Fuzz testing: Beginner's guide
- [**54**星][3y] [C] [fuzzstati0n/fuzzgoat](https://github.com/fuzzstati0n/fuzzgoat) A vulnerable C program for testing fuzzers.
- [**53**星][2y] [Py] [coffeehb/sstif](https://github.com/coffeehb/sstif) 一个Fuzzing服务器端模板注入漏洞的半自动化工具
- [**52**星][1y] [Py] [alexknvl/fuzzball](https://github.com/alexknvl/fuzzball) Scala fuzzer
- [**51**星][7y] [Py] [0xd012/wifuzzit](https://github.com/0xd012/wifuzzit) a 802.11 wireless fuzzer
- [**50**星][1m] [Py] [kisspeter/apifuzzer](https://github.com/kisspeter/apifuzzer) Fuzz your application using you Swagger or API Blueprint definition without coding
- [**49**星][2y] [Py] [softscheck/scff](https://github.com/softscheck/scff) softScheck Cloud Fuzzing Framework
- [**48**星][3y] [Py] [debasishm89/iefuzz](https://github.com/debasishm89/iefuzz) A static Internet Explorer Fuzzer.
- [**48**星][4y] [Py] [signalsec/kirlangic-ttf-fuzzer](https://github.com/signalsec/kirlangic-ttf-fuzzer) TrueType Font Fuzzer
- [**48**星][10m] [C] [sslab-gatech/perf-fuzz](https://github.com/sslab-gatech/perf-fuzz)
- [**47**星][2y] [JS] [hackvertor/visualfuzzer](https://github.com/hackvertor/visualfuzzer) A visual fuzzer written in NodeJS to find Zalgo characters
- [**46**星][4y] [C] [laginimaineb/fuzz_zone](https://github.com/laginimaineb/fuzz_zone) Fuzzing utility which enables sending arbitrary SCMs to TrustZone
- [**46**星][1y] [C] [zznop/flyr](https://github.com/zznop/flyr) Block-based software vulnerability fuzzing framework
- [**46**星][5y] [Py] [f-secure/mqtt_fuzz](https://github.com/f-secure/mqtt_fuzz) A simple fuzzer for the MQTT protocol
- [**44**星][1y] [Py] [christhecoolhut/easy-pickings](https://github.com/christhecoolhut/easy-pickings) Automatic function exporting and linking for fuzzing cross-architecture binaries.
- [**43**星][11m] [Shell] [forte-research/forte-fuzzbench](https://github.com/forte-research/forte-fuzzbench) FoRTE-Research's fuzzing benchmarks
- [**42**星][1y] [C] [hannob/bignum-fuzz](https://github.com/hannob/bignum-fuzz) Code to fuzz bignum libraries
- [**42**星][2y] [Py] [talos-vulndev/fuzzflow](https://github.com/talos-vulndev/fuzzflow)
- [**42**星][3y] [C] [z4ziggy/zigfrid](https://github.com/z4ziggy/zigfrid) A Passive RFID fuzzer
- [**40**星][1y] [Py] [debasishm89/dotnetfuzz](https://github.com/debasishm89/dotnetfuzz) A quick and dirty .NET "Deserialize_*" fuzzer based on James Forshaw's (@tiraniddo) DotNetToJScript.
- [**40**星][1m] [JS] [lydell/eslump](https://github.com/lydell/eslump) Fuzz testing JavaScript parsers and suchlike programs.
- [**40**星][3y] [Py] [xiphosresearch/phuzz](https://github.com/xiphosresearch/phuzz) Find exploitable PHP files by parameter fuzzing and function call tracing
- [**39**星][3m] [C++] [attackercan/cpp-sql-fuzzer](https://github.com/attackercan/cpp-sql-fuzzer)
- [**39**星][5y] [Julia] [danluu/fuzz.jl](https://github.com/danluu/fuzz.jl) World's dumbest fuzzer
- [**36**星][8m] [Py] [fkie-cad/luckycat](https://github.com/fkie-cad/luckycat) A distributed fuzzing management framework
- [**36**星][3m] [Go] [fuzzitdev/example-go](https://github.com/fuzzitdev/example-go) Go Fuzzit Example
- [**36**星][5m] [Py] [teebytes/tnt-fuzzer](https://github.com/teebytes/tnt-fuzzer) OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
- [**35**星][2y] [Shell] [seanheelan/funserialize](https://github.com/seanheelan/funserialize) Scripts and auxiliary files for fuzzing PHP's unserialize function
- [**34**星][4m] [JS] [ronomon/mime](https://github.com/ronomon/mime) Fast, robust, standards-compliant MIME decoder. Ships with extensive tests and fuzz tests.
- [**33**星][4y] [cz-nic/dns-fuzzing](https://github.com/cz-nic/dns-fuzzing) Repository to store unique seeds for DNS server fuzzing
- [**33**星][2y] [PHP] [jhaddix/seclists](https://github.com/jhaddix/seclists) SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
- [**33**星][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer) A concurrent, command-line AWS S3 Fuzzer.
- [**33**星][2y] [Go] [pbnj/s3-fuzzer](https://github.com/pbnj/s3-fuzzer)
- [**32**星][2m] [C] [hfiref0x/rocall](https://github.com/hfiref0x/rocall) ReactOS x86-32 syscall fuzzer
- [**32**星][7y] [Py] [isecpartners/fuzzbox](https://github.com/isecpartners/fuzzbox) A multi-codec media fuzzing tool.
- [**32**星][29d] [Haskell] [ymherklotz/verismith](https://github.com/ymherklotz/verismith) Verilog Fuzzer to test the major simulators and sythesisers by generating random, valid Verilog.
- [**32**星][2m] [Py] [eth-sri/ilf](https://github.com/eth-sri/ilf) AI based fuzzer based on imitation learning
- [**31**星][3y] [C] [jaybosamiya/fuzzing-numpy](https://github.com/jaybosamiya/fuzzing-numpy)
- [**31**星][2y] [Rust] [nikomatsakis/cargo-incremental](https://github.com/nikomatsakis/cargo-incremental) A fuzzing tool for incremental compilation that walks git history
- [**31**星][13d] [Go] [hahwul/ras-fuzzer](https://github.com/hahwul/ras-fuzzer) RAS(RAndom Subdomain) Fuzzer
- [**29**星][11y] [C] [dmolnar/smartfuzz](https://github.com/dmolnar/smartfuzz) Valgrind extension for whitebox fuzz testing
- [**29**星][4y] [Ruby] [nahamsec/cmsfuzz](https://github.com/nahamsec/cmsfuzz)
- [**28**星][6y] [Py] [bl4ckic3/modbus-fuzzer](https://github.com/bl4ckic3/modbus-fuzzer) Modbus Protocol Fuzzer
- [**28**星][4y] [brandonprry/clamav-fuzz](https://github.com/brandonprry/clamav-fuzz) A fuzz job for ClamAV
- [**28**星][2m] [C++] [regehr/opt-fuzz](https://github.com/regehr/opt-fuzz) llvm opt fuzzer and bounded exhaustive test generator
- [**27**星][28d] [Shell] [enfuzz/enfuzz](https://github.com/enfuzz/enfuzz)
- [**27**星][4y] [C] [hannob/selftls](https://github.com/hannob/selftls) Sample application to let OpenSSL talk to itself (for fuzzing)
- [**26**星][2y] [JS] [0xsobky/regaxor](https://github.com/0xsobky/regaxor) A regular expression fuzzer.
- [**25**星][8y] [JS] [hdm/axman](https://github.com/hdm/axman) AxMan ActiveX Fuzzer
- [**25**星][2m] [Py] [mozillasecurity/laniakea](https://github.com/mozillasecurity/laniakea) Laniakea is a utility for managing instances at various cloud providers and aids in setting up a fuzzing cluster.
- [**25**星][3m] [Py] [mozillasecurity/avalanche](https://github.com/mozillasecurity/avalanche) Avalanche is a document generator which uses context-free grammars to generate randomized outputs for fuzz-testing.
- [**24**星][1m] [C++] [curl/curl-fuzzer](https://github.com/curl/curl-fuzzer) Quality assurance testing for the curl project
- [**24**星][26d] [Py] [yelp/fuzz-lightyear](https://github.com/yelp/fuzz-lightyear) A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos engineering testing and stateful, Swagger fuzzing.
- [**23**星][5y] [C++] [certcc/dranzer](https://github.com/certcc/dranzer) Dranzer is a tool that enables users to examine effective techniques for fuzz testing ActiveX controls
- [**23**星][7y] [Ruby] [nuke99/sqlnuke](https://github.com/nuke99/sqlnuke) SQLNuke | Fast Performing MYSQL Injection load_file() Fuzzer
- [**23**星][6m] [C] [sslab-gatech/fuzzification](https://github.com/sslab-gatech/fuzzification) We hinder fuzzing
- [**22**星][5y] [Py] [0x90/wifuzz](https://github.com/0x90/wifuzz) Automatically exported from code.google.com/p/wifuzz
- [**22**星][4y] [Py] [camoufl4g3/sqli-payload-fuzz3r](https://github.com/camoufl4g3/sqli-payload-fuzz3r) sqli payload
- [**22**星][9y] [Diff] [jrmuizel/kemufuzzer](https://github.com/jrmuizel/kemufuzzer) Automatically exported from code.google.com/p/kemufuzzer
- [**22**星][9m] [rootup/phdays9](https://github.com/rootup/phdays9) My fuzzing workshop from PHDays9
- [**22**星][2y] [Py] [saulty4ish/fuzzsafedog](https://github.com/saulty4ish/fuzzsafedog) 安全狗sql注入绕过
- [**22**星][6y] [Py] [ganapati/spaf](https://github.com/ganapati/spaf) Static Php Analysis and Fuzzer
- [**21**星][12m] [Makefile] [tum-i22/munch](https://github.com/tum-i22/munch) Greybox fuzzer for optimizing function coverage and finding low-level vulnerabilities in C programs
- [**21**星][2y] [Py] [migolovanov/libinjection-fuzzer](https://github.com/migolovanov/libinjection-fuzzer) This tool was written as PoC to article
- [**20**星][11m] [Py] [enigmatos/fuzzlon](https://github.com/enigmatos/fuzzlon) 802.15.4 Fuzzer
- [**20**星][5y] [C] [iagox86/dnsmasq-fuzzing](https://github.com/iagox86/dnsmasq-fuzzing)
- [**20**星][11m] [Makefile] [icing/h2fuzz](https://github.com/icing/h2fuzz) everyone can fuzz h2
- [**20**星][4m] [Py] [manhnho/brutality](https://github.com/manhnho/brutality) A fuzzer for any GET entries
- [**20**星][6m] [LLVM] [trailofbits/krfanalysis](https://github.com/trailofbits/krfanalysis) Collection of LLVM passes and triage tools for use with the KRF fuzzer
- [**20**星][3y] [C] [aoncyberlabs/mbedtls-fuzz](https://github.com/AonCyberLabs/mbedtls-fuzz)
- [**19**星][3y] [Java] [doyensec/ajpfuzzer](https://github.com/doyensec/ajpfuzzer) Apache JServ 协议的fuzzer
- [**18**星][12m] [JS] [dubzzz/fuzz-rest-api](https://github.com/dubzzz/fuzz-rest-api) Derive property based testing fact-check into a fuzzer for REST APIs
- [**17**星][2y] [C] [deanjerkovich/rage_fuzzer](https://github.com/deanjerkovich/rage_fuzzer) a dumb protocol-unaware packet fuzzer/replayer
- [**17**星][4m] [Rust] [fuzzitdev/example-rust](https://github.com/fuzzitdev/example-rust) Continuous Rust Fuzzing Example
- [**17**星][2y] [Shell] [hugsy/raspi-fuzz-cluster](https://github.com/hugsy/raspi-fuzz-cluster) A bunch of fuzzers, scripts and config tools for building & managing a Raspberry-Pi fuzzing cluster
- [**17**星][7m] [JS] [mozillasecurity/virgo](https://github.com/mozillasecurity/virgo) Crowdsourced fuzzing cluster.
- [**16**星][1y] [gamozolabs/adventures_in_fuzzing](https://github.com/gamozolabs/adventures_in_fuzzing) Fuzzing的探险之旅
- [**16**星][2y] [R] [mdlincoln/fuzzr](https://github.com/mdlincoln/fuzzr) Fuzz-Test R Functions
- [**15**星][2y] [Go] [chriscooney/fuzz-monkey](https://github.com/chriscooney/fuzz-monkey) Fuzzing tool written in Golang. Insane monkey not included.
- [**15**星][6y] [Py] [glmcdona/meddle](https://github.com/glmcdona/meddle) Framework for vulnerability fuzzing and reverse-engineering tool development.
- [**15**星][1y] [C] [regehr/rb_tree_demo](https://github.com/regehr/rb_tree_demo) code accompanying a blog post about fuzzing a red-black tree implementation:
- [**15**星][2y] [Ruby] [secforce/fixer](https://github.com/secforce/fixer) FIX (Financial Information eXchange) protocol fuzzer
- [**15**星][7y] [Ruby] [yakindanegitim/mbfuzzer](https://github.com/yakindanegitim/mbfuzzer) Mobile Application Fuzzer via SSL MITM
- [**14**星][21d] [Py] [ash09/angr-static-analysis-for-vuzzer64](https://github.com/ash09/angr-static-analysis-for-vuzzer64) Angr-based static analysis tool for vusec/vuzzer64 fuzzing tool
- [**14**星][3y] [Shell] [ouspg/cloudfuzzer](https://github.com/ouspg/cloudfuzzer)
- [**14**星][4m] [Scala] [satelliteapplicationscatapult/tribble](https://github.com/satelliteapplicationscatapult/tribble) Coverage based JVM Fuzz testing tool.
- [**14**星][10m] [Py] [tg12/openmailrelayfuzzer](https://github.com/tg12/openmailrelayfuzzer) Fuzzer for finding Open Mail Relays
- [**14**星][6y] [C#] [aoncyberlabs/fizzer](https://github.com/AonCyberLabs/Fizzer) Fizzer is an assessment tool for fuzzing FIX messages.
- [**13**星][2y] [Py] [debasishm89/stupid](https://github.com/debasishm89/stupid) The dumbest file format fuzzer in the whole world.Written in Python and it uses PyDBG.
- [**13**星][1y] [C++] [houjingyi233/alpc-fuzz-study](https://github.com/houjingyi233/alpc-fuzz-study)
- [**13**星][Elm] [janiczek/elm-architecture-test](https://github.com/janiczek/elm-architecture-test) [Elm 0.18] A library for fuzz testing TEA models by simulating user interactions
- [**13**星][3y] [Py] [lucaboni92/bluefuzz](https://github.com/lucaboni92/bluefuzz) BlueFuzz is a Bluetooth fuzz tester. The scanner is general purpose, while the pseudo-random data generator is customized for OBDII - Bluetooth car adapter.
- [**13**星][3y] [mdsecresearch/uartfuzz](https://github.com/mdsecresearch/uartfuzz) An arduino UARTFuzzer
- [**13**星][1y] [Py] [pinkp4nther/revshfuzz](https://github.com/pinkp4nther/revshfuzz) A tool for fuzzing for ports that allow outgoing connections
- [**13**星][6m] [JS] [strongcourage/fuzzing-corpus](https://github.com/strongcourage/fuzzing-corpus) My fuzzing corpus
- [**13**星][3m] [Py] [dark-lbp/snmp_fuzzer](https://github.com/dark-lbp/snmp_fuzzer) snmp_fuzzer
- [**12**星][2y] [Py] [0x8b30cc/sftpfuzzer](https://github.com/0x8b30cc/sftpfuzzer) Simple FTP Fuzzer
- [**12**星][2y] [C] [cocoahuke/universalmigparser](https://github.com/cocoahuke/universalmigparser) Extract and generate code based on name and type for mig func/arg/request&reply member etc, ideal helper for creating monitor, tracker, fuzzer etc for Mach Remote Procedure Calls.
- [**12**星][2y] [Py] [josephbisch/pyircfuzz](https://github.com/josephbisch/pyircfuzz) An IRC client fuzzer written in Python 3
- [**12**星][3m] [Py] [jtpereyda/boofuzz-ftp](https://github.com/jtpereyda/boofuzz-ftp) Simple FTP fuzzer to demonstrate boofuzz usage.
- [**12**星][2m] [Py] [jtpereyda/boofuzz-http](https://github.com/jtpereyda/boofuzz-http)
- [**12**星][1y] [Dockerfile] [killswitch-gui/fuzz-ffmpeg](https://github.com/killswitch-gui/fuzz-ffmpeg)
- [**11**星][3y] [Visual Basic .NET] [meliton/ispiggy](https://github.com/meliton/ispiggy) Decentralized DNS fuzzer to mitigate ISP Snooping
- [**11**星][3y] [Py] [moshekaplan/fuzzimagemagick](https://github.com/moshekaplan/fuzzimagemagick) Sample files for fuzzing ImageMagick
- [**11**星][3y] [C++] [nitayart/heimdall_fuzz](https://github.com/nitayart/heimdall_fuzz) An S-Boot fuzzer based on Heimdall
- [**11**星][8y] [Ruby] [zedshaw/rfuzz](https://github.com/zedshaw/rfuzz) (DEAD) Old code I used to fuzz attack the original Mongrel.
- [**10**星][1y] [JS] [jeffersonmourak/jest-fuzz](https://github.com/jeffersonmourak/jest-fuzz) Fuzz testing for jest
- [**10**星][1y] [Scala] [mrvplusone/singularity](https://github.com/mrvplusone/singularity) Singularity: Pattern Fuzzing for Worst-Case Algorithmic Complexity
- [**10**星][5m] [Go] [braaaax/gfuzz](https://github.com/braaaax/gfuzz)
- [**9**星][2y] [C] [guidovranken/softethervpn-fuzz-audit](https://github.com/guidovranken/softethervpn-fuzz-audit)
- [**9**星][2m] [C++] [zhunki/superion](https://github.com/zhunki/superion) Superion is a fuzzer which extends the famous AFL to support structured inputs such as JavaScript and XML.
- [**8**星][2m] [ANTLR] [renatahodovan/fuzzinator-configs](https://github.com/renatahodovan/fuzzinator-configs) Configurations written for Fuzzinator
- [**8**星][2m] [JS] [songboyu/defect-mining](https://github.com/songboyu/defect-mining) 模糊器与符号测试结合的漏洞挖掘系统（fuzzer, concolic-execution）
- [**7**星][3y] [Py] [agustingianni/inmemoryfuzzer](https://github.com/agustingianni/inmemoryfuzzer) Prototype for an in memory fuzzer
- [**7**星][2y] [Py] [avilum/smart-url-fuzzer](https://github.com/avilum/smart-url-fuzzer) Explore URLs of domains fast and efficiently using fuzzing techniques
- [**7**星][5y] [Shell] [contactleft/sqlifuzzer](https://github.com/contactleft/sqlifuzzer) Automatically exported from code.google.com/p/sqlifuzzer
- [**7**星][2y] [Py] [petrs/pyapdufuzzer](https://github.com/petrs/pyapdufuzzer) A fuzzer for APDU-based smartcard interfaces
- [**6**星][4y] [C] [brandonprry/ical-fuzz](https://github.com/brandonprry/ical-fuzz) Results from fuzzing libical across many versions
- [**6**星][1y] [Prolog] [geeknik/cve-fuzzing-poc](https://github.com/geeknik/cve-fuzzing-poc) PoCs discovered through fuzzing which resulted in a CVE assignment.
- [**6**星][2y] [Py] [ujin5/av_ioctlfuzzer](https://github.com/ujin5/av_ioctlFuzzer)
- [**6**星][2y] [Rust] [paulgrandperrin/fuzztest-rs](https://github.com/paulgrandperrin/fuzztest-rs) Easily test your software using powerful evolutionary, feedback-driven fuzzing technology.
- [**4**星][10y] [C] [agustingianni/ffuzzer](https://github.com/agustingianni/ffuzzer) Unix File Fuzzer
- [**4**星][10m] [Py] [doyler/vulnserver](https://github.com/doyler/vulnserver) Repository for Vulnserver exploits, fuzzing templates, write-ups, etc.
- [**4**星][2y] [Py] [gilks/boofuzz-primer](https://github.com/gilks/boofuzz-primer) Getting started with fuzzing using the boofuzz python framework.
- [**4**星][4y] [Java] [mc-imperial/vkfuzzer](https://github.com/mc-imperial/vkfuzzer) A fuzzer for the Vulkan API
- [**4**星][2y] [Py] [momenfathi/path-fuzzer-v4](https://github.com/momenfathi/path-fuzzer-v4) Host, IP, Domain, URL / Path Fuzzer
- [**4**星][2y] [Py] [raphx/fuzza](https://github.com/raphx/fuzza) Generic template-based fuzzer
- [**4**星][10m] [Py] [mozillasecurity/orangfuzz](https://github.com/MozillaSecurity/orangfuzz) [Deprecated and unmaintained] An experimental UI fuzzer based on the orangutan framework for Firefox OS devices
- [**3**星][2y] [Py] [arunmagesh/blefuzz](https://github.com/arunmagesh/blefuzz) My personal BLE char fuzzer.
- [**3**星][8m] [C] [maelswarm/cfuzzer](https://github.com/maelswarm/cfuzzer) url-fuzzer
- [**1**星][10m] [C++] [guidovranken/gfwx-fuzzers](https://github.com/guidovranken/gfwx-fuzzers)
- [**1**星][11m] [C++] [guidovranken/lame-fuzzers](https://github.com/guidovranken/lame-fuzzers)
- [**1**星][3y] [ics/domainfuzzer](https://github.com/ics/domainfuzzer) Fuzz domains to detect possible typosquatters, phishing attacks, etc
- [**1**星][7y] [Py] [lukasrypl/snmp-fuzzer](https://github.com/lukasrypl/snmp-fuzzer) A simple tool for random testing (fuzzing) SNMP managers listening for traps.
- [**1**星][7m] [Py] [tylerp96/pcap-blaster](https://github.com/tylerp96/pcap-blaster) General Purpose PCAP Fuzzer
- [**0**星][6y] [Py] [samdory/modfuzzer](https://github.com/samdory/modfuzzer) Modbus Fuzzer Project
- [**0**星][2y] [twi1ight/fuzzing-pocs](https://github.com/twi1ight/fuzzing-pocs)
- [**0**星][3y] [hanno böck/irssi-fuzzing](https://gitlab.com/hanno/irssi-fuzzing)
- [**0**星][4y] [Ruby] [duraki/vircar-fuzzer](https://github.com/duraki/vircar-fuzzer) A fuzzer written in Ruby to act as an virtual attack tool against vircar.
***
- [**1142**星][25d] [bo0om/fuzz.txt](https://github.com/bo0om/fuzz.txt) Potentially dangerous files
- [**1025**星][3m] [C] [google/fuzzer-test-suite](https://github.com/google/fuzzer-test-suite) Set of tests for fuzzing engines
***
- 2020.01 [riusksk] [从研究者的视角看Fuzzing技术发展30年](http://riusksk.me/2020/01/22/Fuzzing技术发展的这30年/)
- 2020.01 [riusksk] [Fuzzing平台建设的研究与设计(paper)](http://riusksk.me/2020/01/21/Fuzzing平台建设的研究与设计-paper/)
- 2020.01 [tencent] [Fuzzing平台建设的研究与设计](https://security.tencent.com/index.php/blog/msg/143)
- 2020.01 [engineeringblog] [Automated IDOR Discovery through Stateful Swagger Fuzzing](https://engineeringblog.yelp.com/2020/01/automated-idor-discovery-through-stateful-swagger-fuzzing.html)
- 2019.12 [freebuf] [谈高效漏洞挖掘之Fuzzing的艺术](https://www.freebuf.com/vuls/221129.html)
- 2019.11 [riusksk] [Frida框架在Fuzzing中的应用](http://riusksk.me/2019/11/30/Frida框架在Fuzzing中的应用/)
- 2019.11 [riusksk] [Fuzzing平台建设的研究与设计](http://riusksk.me/2019/11/18/Fuzzing平台建设的研究与设计/)
- 2019.11 [aliyun] [从一道CTF题学习Fuzz思想](https://xz.aliyun.com/t/6737)
- 2019.11 [regehr] [Helping Generative Fuzzers Avoid Looking Only Where the Light is Good, Part 1](https://blog.regehr.org/archives/1700)
- 2019.10 [trailofbits] [Destroying x86_64 instruction decoders with differential fuzzing](https://blog.trailofbits.com/2019/10/31/destroying-x86_64-instruction-decoders-with-differential-fuzzing/)
- 2019.10 [4hou] [Fragscapy：通过协议Fuzz的方法探测IDS/防火墙检测规则的漏洞](https://www.4hou.com/tools/20657.html)
- 2019.10 [aliyun] [基于qemu和unicorn的Fuzz技术分析](https://xz.aliyun.com/t/6457)
- 2019.09 [aliyun] [记一次 afdko fuzzing](https://xz.aliyun.com/t/6334)
- 2019.09 [amossys] [Fragscapy: Fuzzing protocols to evade firewalls and IDS](https://blog.amossys.fr/fragscapy-fuzzing-protocols-to-evade-firewalls.html)
- 2019.07 [riusksk] [一些值得学习的Fuzzer开源项目](http://riusksk.me/2019/07/14/一些值得学习的Fuzzer开源项目/)
- 2019.07 [0x00sec] [Defensive Fuzzing [ Game Hax ]](https://0x00sec.org/t/defensive-fuzzing-game-hax/14750)
- 2019.07 [freebuf] [检测工控设备SNMP漏洞工具：SNMP Fuzzer](https://www.freebuf.com/sectool/206417.html)
- 2019.06 [4hou] [模糊测试基础指南（下）](https://www.4hou.com/info/news/18608.html)
- 2019.06 [sjtu] [REDQUEEN: Fuzzing With Input-to-State Correspondence](https://loccs.sjtu.edu.cn/gossip/blog/2019/06/05/redqueen-fuzzing-with-input-to-state-correspondence/)
- 2019.05 [pentestpartners] [Tesla Killer: The Fuzzed and the Furious](https://www.pentestpartners.com/security-blog/tesla-killer-the-fuzzed-and-the-furious/)
- 2019.05 [guidovranken] [Differential fuzzing of cryptographic libraries](https://guidovranken.com/2019/05/14/differential-fuzzing-of-cryptographic-libraries/)
- 2019.04 [4hou] [模糊测试基础指南（上）](https://www.4hou.com/technology/17684.html)
- 2019.04 [trailofbits] [User-Friendly Fuzzing with Sienna Locomotive](https://blog.trailofbits.com/2019/04/08/user-friendly-fuzzing-with-sienna-locomotive/)
- 2019.04 [nebelwelt] [The Fuzzing Hype-Train: How Random Testing Triggers Thousands of Crashes](http://nebelwelt.net/blog/2019/0401-FuzzTrain.html)
- 2019.03 [4hou] [模糊测试与漏洞利用实战：MikroTik无需认证的远程代码执行漏洞(CVE-2018–7445)（下）](https://www.4hou.com/vulnerable/16702.html)
- 2019.03 [4hou] [模糊测试与漏洞利用实战：MikroTik无需认证的远程代码执行漏洞(CVE-2018–7445)（上）](https://www.4hou.com/vulnerable/16701.html)
- 2019.03 [DanielC7] [Introduction to File Format Fuzzing & Exploitation](https://medium.com/p/922143ab2ab3)
- 2019.02 [4hou] [如何在安全研究中使用模糊测试](https://www.4hou.com/web/16392.html)
- 2019.02 [ixiacom] [How to Use Fuzzing in Security Research](https://www.ixiacom.com/company/blog/how-use-fuzzing-security-research)
- 2019.02 [alexgaynor] [Notes on fuzzing ImageMagick and GraphicsMagick](https://alexgaynor.net/2019/feb/05/notes-fuzzing-imagemagick-graphicsmagick/)
- 2019.01 [nullprogram] [The Day I Fell in Love with Fuzzing](https://nullprogram.com/blog/2019/01/25/)
- 2019.01 [mwrinfosecurity] [What the Fuzz](https://labs.mwrinfosecurity.com/blog/what-the-fuzz/)
- 2019.01 [f] [What the Fuzz](https://labs.f-secure.com/blog/what-the-fuzz/)
- 2019.01 [securitygossip] [ContractFuzzer: Fuzzing Smart Contracts for Vulnerability Detection](https://securitygossip.com/blog/2019/01/21/contractfuzzer-fuzzing-smart-contracts-for-vulnerability-detection/)
- 2019.01 [sjtu] [ContractFuzzer: Fuzzing Smart Contracts for Vulnerability Detection](https://loccs.sjtu.edu.cn/gossip/blog/2019/01/21/contractfuzzer-fuzzing-smart-contracts-for-vulnerability-detection/)
- 2019.01 [pediy] [[推荐][分享]fuzzing技术总结](https://bbs.pediy.com/thread-248997.htm)
- 2019.01 [skylined] [RegExpFuzzer3 for sale](https://blog.skylined.nl/20190115001.html)
- 2019.01 [freebuf] [简单高效的模糊测试——Fuzzing](https://www.freebuf.com/news/193602.html)
- 2019.01 [pediy] [[原创]手写fuzzer实现anti-debugging趣味实验 XD](https://bbs.pediy.com/thread-248834.htm)
- 2019.01 [arxiv] [[1901.01142] V-Fuzz: Vulnerability-Oriented Evolutionary Fuzzing](https://arxiv.org/abs/1901.01142)
- 2019.01 [sans] [Whats all the fuzz about?](https://www.sans.org/cyber-security-summit/archives/file/summit_archive_1493738055.pdf)
- 2019.01 [klee] [Deferred Concretization in Symbolic Execution via Fuzzing](https://dl.acm.org/citation.cfm?id=3330554)
- 2019.01 [klee] [Compositional Fuzzing Aided by Targeted Symbolic Execution](https://arxiv.org/abs/1903.02981)
- 2018.12 [trailofbits] [Fuzzing Like It’s 1989](https://blog.trailofbits.com/2018/12/31/fuzzing-like-its-1989/)
- 2018.12 [tindie] [Caught by the Fuzz Pedal!](https://blog.tindie.com/2018/12/gritty-guitar-sounds/)
- 2018.12 [4hou] [50天收获50个CVE：针对Adobe Reader的模糊测试](http://www.4hou.com/vulnerable/15310.html)
- 2018.12 [venus] [如何使用 KittyFuzzer 结合 ISF 中的工控协议组件对工控协议进行 Fuzz](https://paper.seebug.org/772/)
- 2018.12 [freebuf] [Smart Greybox Fuzzing：一种功能更强效率更高的Fuzzer模型](https://www.freebuf.com/sectool/191395.html)
- 2018.12 [skylined] [RegExpFuzzer2 for sale](https://blog.skylined.nl/20181219001.html)
- 2018.12 [checkpoint] [我是如何在50天内挖掘到50个AdobeReader漏洞的](https://research.checkpoint.com/50-adobe-cves-in-50-days/)
- 2018.11 [freebuf] [SQL注入常规Fuzz全记录](https://www.freebuf.com/articles/web/190019.html)
- 2018.11 [pediy] [[原创]我的二进制漏洞挖掘方法思路（不仅是fuzz）希望有缘人指点](https://bbs.pediy.com/thread-248040.htm)
- 2018.11 [fortinet] [Predictions: AI Fuzzing and Machine Learning Poisoning](https://www.fortinet.com/blog/industry-trends/predictions--ai-fuzzing-and-machine-learning-poisoning-.html)
- 2018.11 [insinuator] [Hack.lu 2018: Fuzzing Workshop by René Freingruber](https://insinuator.net/2018/11/hack-lu-2018-fuzzing-workshop-by-rene-freingruber/)
- 2018.10 [n0where] [Mutiny Fuzzing Framework](https://n0where.net/mutiny-fuzzing-framework)
- 2018.10 [skylined] [Fuzz in sixty seconds](https://blog.skylined.nl/20181017001.html)
- 2018.10 [360] [漏洞挖掘之乱拳打死老师傅——Fuzzer](https://www.anquanke.com/post/id/161719/)
- 2018.10 [trailofbits] [How to Spot Good Fuzzing Research](https://blog.trailofbits.com/2018/10/05/how-to-spot-good-fuzzing-research/)
- 2018.10 [amossys] [MemITM, a memory fuzzer/sniffer](http://blog.amossys.fr/memitm-a-memory-fuzzer-sniffer.html)
- 2018.09 [acolyer] [QSYM: a practical concolic execution engine tailored for hybrid fuzzing](https://blog.acolyer.org/2018/09/12/qsym-a-practical-concolic-execution-engine-tailored-for-hybrid-fuzzing/)
- 2018.07 [freebuf] [PTFuzzer：一个基于硬件加速的二进制程序Fuzz工具](http://www.freebuf.com/sectool/177578.html)
- 2018.07 [guidovranken] [VrankenFuzz – a multi-sensor, multi-generator mutational fuzz testing engine](https://guidovranken.com/2018/07/06/vrankenfuzz-a-multi-sensor-multi-generator-mutational-fuzz-testing-engine/)
- 2018.06 [aliyun] [sql注入fuzz bypass waf](https://xz.aliyun.com/t/2418)
- 2018.06 [vegardno] [Compiler fuzzing, part 1](http://www.vegardno.net/2018/06/compiler-fuzzing.html)
- 2018.06 [n0where] [RF Fuzzing Framework: TumbleRF](https://n0where.net/rf-fuzzing-framework-tumblerf)
- 2018.06 [securitygossip] [IOTFUZZER: Discovering Memory Corruptions in IoT Through App-based Fuzzing](https://securitygossip.com/blog/2018/06/15/iotfuzzer-discovering-memory-corruptions-in-iot-through-app-based-fuzzing/)
- 2018.06 [sjtu] [IOTFUZZER: Discovering Memory Corruptions in IoT Through App-based Fuzzing](https://loccs.sjtu.edu.cn/gossip/blog/2018/06/15/iotfuzzer-discovering-memory-corruptions-in-iot-through-app-based-fuzzing/)
- 2018.05 [localh0t] [backfuzz v0.3 released](https://medium.com/p/9992a8a9893b)
- 2018.05 [localh0t] [backfuzz v0.2](https://medium.com/p/37105bfdc59c)
- 2018.05 [payatu] [CloudFuzz: Machine learning powered content specific input generation for fuzzing](https://payatu.com/cloudfuzz-machine-learning-powered-content-specific-input-generation-fuzzing/)
- 2018.04 [freebuf] [一系列用于Fuzzing学习的资源汇总](http://www.freebuf.com/articles/rookie/169413.html)
- 2018.04 [pediy] [[翻译]模糊测试: 初学者入门指南](https://bbs.pediy.com/thread-225766.htm)
- 2018.03 [repret] [Protected: Reducing Fuzzing Coverage Overhead using “Disposable Probes”](https://repret.wordpress.com/2018/03/21/128/)
- 2018.03 [freebuf] [利用视觉模糊测试技术探索Z͌̈́̾a͊̈́l͊̿g̏̉͆o̾̚̚S̝̬ͅc̬r̯̼͇ͅi̼͖̜̭͔p̲̘̘̹͖t̠͖̟̹͓͇ͅ](http://www.freebuf.com/articles/web/165407.html)
- 2018.03 [360] [如何Fuzz ELF文件中的任意函数](https://www.anquanke.com/post/id/100801/)
- 2018.03 [360] [如何采用可视化Fuzz技术探索Z͌̈́̾a͊̈́l͊̿g̏̉͆o̾̚̚S̝̬ͅc̬r̯̼͇ͅi̼͖̜̭͔p̲̘̘̹͖t̠͖̟̹͓͇ͅ](https://www.anquanke.com/post/id/100516/)
- 2018.03 [portswigger] [利用headless Chrome Fuzzing Z͌̈́̾a͊̈́l͊̿g̏̉͆o̾̚̚S̝̬ͅc̬r̯̼͇ͅi̼͖̜̭͔p̲̘̘̹͖t̠͖̟̹͓͇ͅ(特殊字符脚本)](https://portswigger.net/blog/unearthing-zalgoscript-with-visual-fuzzing)
- 2018.03 [n0where] [Fuzzing and Data Manipulation Framework: Fuddly](https://n0where.net/fuzzing-and-data-manipulation-framework-fuddly)
- 2018.02 [pediy] [[原创]inject fuzz python脚本](https://bbs.pediy.com/thread-224736.htm)
- 2018.02 [fidusinfosec] [远程桌面管理工具NoMachine提权/DoS漏洞(CVE-2018-6947)](https://www.fidusinfosec.com/nomachine-road-code-execution-without-fuzzing-cve-2018-6947/)
- 2018.02 [freebuf] [Fuzz自动化Bypass软WAF姿势](http://www.freebuf.com/sectool/161808.html)
- 2018.02 [payatu] [利用 AI 提高 Fuzzing 效率的解决方案 CloudFuzz](https://payatu.com/machine-learning-effective-fuzzing/)
- 2018.01 [blahcat] [Fuzzing arbitrary functions in ELF binaries](http://blahcat.github.io/2018/03/11/fuzzing-arbitrary-functions-in-elf-binaries/)
- 2018.01 [microsoft] [Application fuzzing in the era of Machine Learning and AI](https://cloudblogs.microsoft.com/microsoftsecure/2018/01/03/application-fuzzing-in-the-era-of-machine-learning-and-ai/)
- 2018.01 [talosintelligence] [Tutorial: Mutiny Fuzzing Framework and Decept Proxy](http://blog.talosintelligence.com/2018/01/tutorial-mutiny-fuzzing-framework-and.html)
- 2017.12 [cn0xroot] [密码保护：Hijack IoT devices with USRP and OpenBTS | IoT Module fuzzing with OpenBTS Part ②](https://cn0xroot.com/2017/12/10/iot-module-fuzzing-with-openbts-part-%e2%91%a1/)
- 2017.12 [talosintelligence] [The Mutiny Fuzzing Framework and Decept Proxy](http://blog.talosintelligence.com/2017/12/mutiny-decept.html)
- 2017.12 [aliyun] [Fuzzing 与人脸识别绕过](https://xz.aliyun.com/t/1726)
- 2017.11 [pediy] [[翻译]Fuzzing（模糊测试）与一种基于属性的测试](https://bbs.pediy.com/thread-222901.htm)
- 2017.11 [sec] [The Art of Fuzzing – Slides and Demos](https://sec-consult.com/en/blog/2017/11/the-art-of-fuzzing-slides-and-demos/)
- 2017.10 [fortinet] [A 14-day Journey through Embedded Open Type Font Fuzzing](https://blog.fortinet.com/2017/10/19/a-14-day-journey-through-embedded-open-type-font-fuzzing)
- 2017.10 [fortinet] [安全人员讲述：我们如何组合使用粗糙简陋的和高端智能的开源 fuzzer 发现多个 Embedded Open Type (EOT) 漏洞](https://www.fortinet.com/blog/threat-research/a-14-day-journey-through-embedded-open-type-font-fuzzing.html)
- 2017.09 [ouspg] [Fuzz testing: Beginner’s guide](https://medium.com/p/da2c9179caa7)
- 2017.09 [fuzzstation] [What is “Continuous Fuzzing”?](https://medium.com/p/e791c9bba8d0)
- 2017.09 [freebuf] [我如何使用Cloud Fuzzing挖到了一个Tcpdump漏洞](http://www.freebuf.com/articles/network/147955.html)
- 2017.09 [tarlogic] [Fuzzing Tales 0x01: Yadifa DNS](https://www.tarlogic.com/en/blog/fuzzing-tales-0x01-yadifa-dns/)
- 2017.08 [guidovranken] [Bitcoin fuzzers](https://guidovranken.wordpress.com/2017/08/18/bitcoin-fuzzers/)
- 2017.08 [guidovranken] [Bitcoin fuzzers](https://guidovranken.com/2017/08/18/bitcoin-fuzzers/)
- 2017.08 [cybrary] [Your Complete Guide to Fuzzing](https://www.cybrary.it/2017/08/your-complete-guide-to-fuzzing/)
- 2017.08 [heelan] [Fuzzing PHP’s unserialize Function](https://sean.heelan.io/2017/08/12/fuzzing-phps-unserialize-function/)
- 2017.08 [4hou] [我是如何通过fuzz apache httpd服务发现CVE-2017-7668](http://www.4hou.com/technology/6738.html)
- 2017.08 [360] [看我如何对Apache进行模糊测试并挖到了一个价值1500刀的漏洞](https://www.anquanke.com/post/id/86581/)
- 2017.08 [360] [Scapy Fuzz实现——S7协议从建连到“正常交流“(二)](https://www.anquanke.com/post/id/86569/)
- 2017.07 [4hou] [Fuzz 私有协议的经验分享](http://www.4hou.com/technology/5745.html)
- 2017.07 [fuzzstation] [What Applications Should Be Fuzz Tested?](https://medium.com/p/e83c77aec84a)
- 2017.07 [z4ziggy] [Zigfrid – A Passive RFID Fuzzer.](https://z4ziggy.wordpress.com/2017/07/21/zigfrid-a-passive-rfid-fuzzer/)
- 2017.07 [360] [Scapy Fuzz实现——S7协议从建连到“正常交流“(一)](https://www.anquanke.com/post/id/86449/)
- 2017.07 [nul] [使用ChakraCore来Fuzz NScript（3）——构建符合NScript的Funfuzz脚本](http://www.nul.pw/2017/07/17/245.html)
- 2017.07 [animal0day] [From fuzzing Apache httpd server to CVE-2017-7668 and a $1500 bounty](https://animal0day.blogspot.com/2017/07/from-fuzzing-apache-httpd-server-to-cve.html)
- 2017.07 [nul] [使用ChakraCore来Fuzz NScript](http://www.nul.pw/2017/07/06/241.html)
- 2017.07 [nul] [以子之矛，陷子之盾，何如？——使用ChakraCore来Fuzz NScript （2）](http://www.nul.pw/2017/07/06/244.html)
- 2017.07 [4hou] [炒鸡棒的模糊测试技术](http://www.4hou.com/mobile/6015.html)
- 2017.06 [ecforce] [Fixer – Fix Protocol Fuzzing Tool](https://www.secforce.com/blog/2017/06/fixer-fix-protocol-fuzzing-tool/)
- 2017.06 [guidovranken] [OpenVPN fuzzers released + notes](https://guidovranken.wordpress.com/2017/06/26/openvpn-fuzzers-released-notes/)
- 2017.06 [f] [Super Awesome Fuzzing, Part One](https://labsblog.f-secure.com/2017/06/22/super-awesome-fuzzing-part-one/)
- 2017.06 [trustwave] [ModSecurity version 3: Fuzzing as part of the QA](https://www.trustwave.com/Resources/SpiderLabs-Blog/ModSecurity-version-3--Fuzzing-as-part-of-the-QA/)
- 2017.06 [nul] [精简了一下mozilla的funfuzzer，有兴趣的可以直接拿去玩](http://www.nul.pw/2017/06/12/235.html)
- 2017.06 [acolyer] [Node.fz: fuzzing the server-side event-driven architecture](https://blog.acolyer.org/2017/06/09/node-fz-fuzzing-the-server-side-event-driven-architecture/)
- 2017.06 [pediy] [[原创]从模糊测试到漏洞利用--WRT54G无线路由器漏洞挖掘分析实战](https://bbs.pediy.com/thread-218182.htm)
- 2017.05 [fastly] [以 H2O HTTP 服务器、HTTP/2为例，介绍如何使用 OSS-Fuzz“bootstrapself-service continuous fuzzing”](https://www.fastly.com/blog/how-bootstrap-self-service-continuous-fuzzing)
- 2017.05 [debasish] [OpenXMolar - A MS OpenXML Format Fuzzing Framework](http://www.debasish.in/2017/05/openxmolar-ms-openxml-format-fuzzing_20.html)
- 2017.05 [websecurify] [诡异技巧 Fuzz JSON，将你的Fuzz 技术带入下一个境界](https://blog.websecurify.com/2017/05/fuzz-json.html)
- 2017.05 [pediy] [【OSG】以福昕阅读器为例实现高性能Fuzz Applied high-speed in-process fuzzing: the case of Foxit Reader](https://bbs.pediy.com/thread-217631.htm)
- 2017.05 [websecurify] [Landing The Fuzzer](https://blog.websecurify.com/2017/05/landing-the-fuzzer.html)
- 2017.05 [freebuf] [云端模糊测试挖洞实例](http://www.freebuf.com/articles/system/133210.html)
- 2017.05 [repret] [静态分析提高 Fuzzing 的代码覆盖率：使用 IDA 脚本枚举所有 CMP 指令及与CMP 相关的 JUMP 指令，生成反转 CMP 条件的字典，Fuzzing 时由 KFUZZ 注入。](https://repret.wordpress.com/2017/05/01/improving-coverage-guided-fuzzing-using-static-analysis/)
- 2017.04 [freebuf] [beSTORM之DLL Fuzz入门教程](http://www.freebuf.com/articles/system/133188.html)
- 2017.04 [repret] [KFUZZ, a fuzzer story.](https://repret.wordpress.com/2017/04/27/kfuzz-a-fuzzer-story/)
- 2017.04 [360] [看我如何使用Cloud Fuzzing挖到了一个tcpdump漏洞](https://www.anquanke.com/post/id/85944/)
- 2017.04 [polaris] [一个半自动化命令注入漏洞Fuzz工具](http://polaris-lab.com/index.php/archives/243/)
- 2017.03 [nul] [是否可行？Let's "Fuzz"](http://www.nul.pw/2017/03/26/208.html)
- 2017.03 [ocallahan] [Thoughts On "Java and Scala’s Type Systems are Unsound" And Fuzz Testing](https://robert.ocallahan.org/2017/03/thoughts-on-java-and-scalas-type.html)
- 2017.03 [softscheck] [我们是如何使用cloud fuzzing在tcpdump中发现漏洞的。](https://www.softscheck.com/en/identifying-security-vulnerabilities-with-cloud-fuzzing/)
- 2017.03 [win] [The Fuzz about Terminal Services Session Hijacking](http://blog.win-fu.com/2017/03/the-fuzz-about-terminal-services.html)
- 2017.03 [pediy] [[翻译]资源:开源Fuzzers工具列表 (以及其它fuzzing工具)](https://bbs.pediy.com/thread-216352.htm)
- 2017.03 [pediy] [[转帖]趋势科技研究员从漏洞、漏洞利用、Fuzz、利用缓解四个方面总结的一张脑图](https://bbs.pediy.com/thread-216256.htm)
- 2017.03 [elearnsecurity] [Fuzzing for Security and Stability](https://blog.elearnsecurity.com/fuzzing-for-security-and-stability.html)
- 2017.02 [freebuf] [FuzzDomain域名爆破工具发布以及开源](http://www.freebuf.com/sectool/127400.html)
- 2017.02 [360] [文件格式Fuzz实践](https://www.anquanke.com/post/id/85524/)
- 2017.02 [oherrala] [QuickCheck or Fuzzing? Which one to use?](https://medium.com/p/98d200e9609b)
- 2017.02 [sizzop] [Intro to Fuzzing - BSides Tampa 2017](https://sizzop.github.io/2017/02/11/intro-to-fuzzing.html)
- 2017.02 [geeknik] [Fuzzing tcpdump nets multiple CVE assignments](http://www.geeknik.net/86wrk44ht)
- 2017.02 [toolswatch] [GramTest – Fuzzing with grammars](http://www.toolswatch.org/2017/02/gramtest-fuzzing-with-grammars/)
- 2017.01 [cn0xroot] [使用OpenBTS基站测试物联网模块 IoT Module fuzzing with OpenBTS Part ①](https://cn0xroot.com/2017/01/10/iot-mode-fuzzing-with-openbt/)
- 2017.01 [acunetix] [Getting Started with the Acunetix HTTP Fuzzer](https://www.acunetix.com/blog/docs/http-fuzzer/)
- 2017.01 [fuzzing] [Fuzzing Irssi with Perl Scripts](https://blog.fuzzing-project.org/55-Fuzzing-Irssi-with-Perl-Scripts.html)
- 2017.01 [exodusintel] [Fuzzing Grammars in Python: gramfuzz](https://blog.exodusintel.com/2017/01/03/gramfuzz/)
- 2016.12 [4hou] [高性能Fuzz：以Fuzz福昕阅读器为例](http://www.4hou.com/technology/1940.html)
- 2016.12 [n0where] [Fuzzer for Individual Method Parameters: RamFuzz](https://n0where.net/fuzzer-for-individual-method-parameters-ramfuzz)
- 2016.12 [n0where] [Python JSON Fuzzer: PyJFuzz](https://n0where.net/python-json-fuzzer-pyjfuzz)
- 2016.11 [freebuf] [WAFNinja：灵活的WAF自动化Fuzz工具](http://www.freebuf.com/sectool/120816.html)
- 2016.11 [pediy] [[原创]PassiveFuzz框架试用与调试小记](https://bbs.pediy.com/thread-214139.htm)
- 2016.11 [turingh] [PassiveFuzz框架试用与调试小记](http://turingh.github.io/2016/11/21/try-out-PassiveFuzzFrameworkOSX/)
- 2016.11 [deepsec] [DeepSec 2016 Talk: Systematic Fuzzing and Testing of TLS Libraries – Juraj Somorovsky](http://blog.deepsec.net/deepsec2016-talk-systematic-fuzzing-testing-tls-libraries-juraj-somorovsky/)
- 2016.11 [n0where] [High Throughput Fuzzer: Grr](https://n0where.net/high-throughput-fuzzer-grr)
- 2016.10 [vectra] [Triggering MS16-030 via targeted fuzzing](https://blog.vectra.ai/blog/triggering-ms16-030-via-targeted-fuzzing)
- 2016.10 [360] [基于802.11Fuzz技术的研究](https://www.anquanke.com/post/id/84689/)
- 2016.10 [n0where] [CERT Basic Fuzzing Framework: BFF](https://n0where.net/cert-basic-fuzzing-framework-bff)
- 2016.10 [cmu] [Announcing CERT Basic Fuzzing Framework Version 2.8](https://insights.sei.cmu.edu/cert/2016/10/announcing-cert-basic-fuzzing-framework-bff-28.html)
- 2016.09 [] [利用Python开发Fuzz漏洞插件](http://0aa.me/index.php/archives/62/)
- 2016.09 [360] [DIY个人ftp fuzzer](https://www.anquanke.com/post/id/84617/)
- 2016.09 [mgba] [The Importance of Fuzzing…Emulators?](http://mgba.io/2016/09/13/fuzzing-emulators/)
- 2016.09 [geeknik] [Fuzzing Perl Follow-up #1](http://www.geeknik.net/45udnffeg)
- 2016.08 [nul] [fuzz程序的第一步：打开edge的几种方法](http://www.nul.pw/2016/08/31/198.html)
- 2016.08 [ixiacom] [FaX - An Enhanced ActiveX Fuzzing Framework](https://www.ixiacom.com/company/blog/fax-enhanced-activex-fuzzing-framework)
- 2016.08 [lafintel] [Circumventing Fuzzing Roadblocks with Compiler Transformations](https://lafintel.wordpress.com/2016/08/15/circumventing-fuzzing-roadblocks-with-compiler-transformations/)
- 2016.08 [polaris] [一个Fuzzing服务器端模板注入漏洞的半自动化工具](http://polaris-lab.com/index.php/archives/209/)
- 2016.07 [cybrary] [Tradecraft Tuesday – Fuzzing for Vulnerabilities](https://www.cybrary.it/2016/07/tradecraft-tuesday-fuzzing-vulnerabilities/)
- 2016.07 [n0where] [Evolutionary Knowledge Based Fuzzer: Choronzon](https://n0where.net/evolutionary-knowledge-based-fuzzer-choronzon)
- 2016.07 [ikotler] [Fuzzing The Kill Chain](http://blog.ikotler.org/2016/07/fuzzing-kill-chain.html)
- 2016.07 [knownsec] [非主流Fuzzing-模糊测试在⾮内存型漏洞挖掘中的应⽤](http://blog.knownsec.com/2016/07/some-unique-fuzzing/)
- 2016.07 [n0tr00t] [非主流Fuzzing - 模糊测试在非内存型漏洞挖掘中的应用](https://n0tr00t.com/2016/07/06/Some-Unique-Fuzzing.html)
- 2016.06 [foxglovesecurity] [Finding pearls; fuzzing ClamAV](https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/)
- 2016.05 [n0where] [Protocol Learning and Stateful Fuzzing: Pulsar](https://n0where.net/protocol-learning-and-stateful-fuzzing-pulsar)
- 2016.05 [cybersecpolitics] [The common thread: Fuzzing, Bug Triage, and Attacker Automation](https://cybersecpolitics.blogspot.com/2016/05/the-common-thread-fuzzing-bug-triage.html)
- 2016.04 [heelan] [Fuzzing Language Interpreters Using Regression Tests](https://sean.heelan.io/2016/04/26/fuzzing-language-interpreters-using-regression-tests/)
- 2016.03 [freebuf] [Kitty：Python语言编写的Fuzzing框架](http://www.freebuf.com/sectool/99895.html)
- 2016.03 [allsoftwaresucks] [Fuzzing Vulkans, how do they work?](http://allsoftwaresucks.blogspot.com/2016/03/fuzzing-vulkans-how-do-they-work.html)
- 2016.02 [360] [Fuddly：fuzzing和数据处理框架](https://www.anquanke.com/post/id/83474/)
- 2016.02 [freebuf] [关于Fuzz工具的那些事儿](http://www.freebuf.com/sectool/76861.html)
- 2016.02 [n0where] [Python Fuzzing Framework: Kitty](https://n0where.net/python-fuzzing-framework-kitty)
- 2016.01 [securityblog] [Security oriented open source fuzzer](http://securityblog.gr/3197/security-oriented-open-source-fuzzer/)
- 2015.12 [freebuf] [剑走偏锋：基于静态检测的IE漏洞检测工具IEFuzz](http://www.freebuf.com/sectool/91180.html)
- 2015.12 [debasish] [IEFuzz - A Static Internet Explorer Fuzzer](http://www.debasish.in/2015/12/iefuzz-static-internet-explorer-fuzzer.html)
- 2015.12 [pediy] [用内存fuzz来挖掘软件漏洞](https://bbs.pediy.com/thread-206563.htm)
- 2015.12 [fuzzing] [Fuzzing Math - miscalculations in OpenSSL's BN_mod_exp (CVE-2015-3193)](https://blog.fuzzing-project.org/31-Fuzzing-Math-miscalculations-in-OpenSSLs-BN_mod_exp-CVE-2015-3193.html)
- 2015.12 [pediy] [[原创]并行化入侵式Fuzzing系统—Parallel Aggressive Fuzzing System(PAFS)](https://bbs.pediy.com/thread-206240.htm)
- 2015.11 [topsec] [AlphaFuzzer内存fuzz框架即将发布](http://blog.topsec.com.cn/ad_lab/memoryfuzzer/)
- 2015.11 [topsec] [AlphaFuzzer内存fuzz框架即将发布](http://blog.topsec.com.cn/memoryfuzzer/)
- 2015.11 [flanker017] [Fuzzing binder for fun and profit](https://blog.flanker017.me/fuzzing-binder-for-fun-and-profit/)
- 2015.11 [freebuf] [Fuzzing初学者指南：利用Address Sanitizer找到更多BUG](http://www.freebuf.com/news/83811.html)
- 2015.11 [n0where] [SSL and TLS protocol test suite and fuzzer: tlsfuzzer](https://n0where.net/tls-test-suite)
- 2015.11 [freebuf] [Fuzzing初学者指南：教你如何使用zzuf](http://www.freebuf.com/news/83737.html)
- 2015.10 [sensepost] [Wadi Fuzzer](https://sensepost.com/blog/2015/wadi-fuzzer/)
- 2015.09 [gdssecurity] [Fuzzing the mbed TLS Library](https://blog.gdssecurity.com/labs/2015/9/21/fuzzing-the-mbed-tls-library.html)
- 2015.09 [fuzzing] [September report of the Fuzzing Project](https://blog.fuzzing-project.org/24-September-report-of-the-Fuzzing-Project.html)
- 2015.09 [tox] [Fuzzing The New Groupchats](https://blog.tox.chat/2015/09/fuzzing-the-new-groupchats/)
- 2015.08 [filippo] [DNS parser, meet Go fuzzer](https://blog.filippo.io/dns-parser-meet-go-fuzzer/)
- 2015.08 [cloudflare] [DNS parser, meet Go fuzzer](https://blog.cloudflare.com/dns-parser-meet-go-fuzzer/)
- 2015.07 [pediy] [漏洞挖掘框架AlphaFuzzer [更新至1.4]](https://bbs.pediy.com/thread-202398.htm)
- 2015.07 [topsec] [AlphaFuzzer（更新至1.6）](http://blog.topsec.com.cn/ad_lab/alphafuzzer/)
- 2015.07 [fuzzing] [Quarterly report on Fuzzing Project](https://blog.fuzzing-project.org/20-Quarterly-report-on-Fuzzing-Project.html)
- 2015.07 [topsec] [AlphaFuzzer即将发布](http://blog.topsec.com.cn/ad_lab/alpha_fuzzer/)
- 2015.06 [fuzzing] [Fuzzing Project gets support from the Core Infrastructure Initiative](https://blog.fuzzing-project.org/16-Fuzzing-Project-gets-support-from-the-Core-Infrastructure-Initiative.html)
- 2015.06 [vimeo] [Ben Nagy Fuzzing OSX At Scale](https://vimeo.com/129701495)
- 2015.06 [vimeo] [Nathan Rittenhouse Problems in Symbolic Fuzzing](https://vimeo.com/129598756)
- 2015.05 [n0where] [Multi Purpose Fuzzer: zzuf](https://n0where.net/multi-purpose-fuzzer-zzuf)
- 2015.05 [nickler] [Fuzzing Bitcoin Consensus](https://nickler.ninja/blog/2015/05/09/fuzzing-bitcoin-consensus/)
- 2015.05 [n0tr00t] [WordPress tags fuzz test - wct.py](https://n0tr00t.com/2015/05/01/Wordpress-tags-fuzz-test.html)
- 2015.04 [fuzzing] [Why it can make sense to fuzz config files / two out of bounds vulnerabilities in curl (TFPA 004/2015)](https://blog.fuzzing-project.org/8-Why-it-can-make-sense-to-fuzz-config-files-two-out-of-bounds-vulnerabilities-in-curl-TFPA-0042015.html)
- 2015.03 [freebuf] [国产工具：渗透测试助手PKAV HTTP Fuzzer发布](http://www.freebuf.com/sectool/61313.html)
- 2015.02 [fuzzing] [Multiple issues in GnuPG found through keyring fuzzing (TFPA 001/2015)](https://blog.fuzzing-project.org/5-Multiple-issues-in-GnuPG-found-through-keyring-fuzzing-TFPA-0012015.html)
- 2015.01 [pediy] [[原创]用EasyFuzzer1.8挖掘某FTP服务器远程溢出漏洞（可利用）](https://bbs.pediy.com/thread-197080.htm)
- 2014.11 [hboeck] [The Fuzzing Project](https://blog.hboeck.de/archives/859-The-Fuzzing-Project.html)
- 2014.11 [fuzzing] [Advisories by the Fuzzing Project](https://blog.fuzzing-project.org/1-Advisories-by-the-Fuzzing-Project.html)
- 2014.11 [ioactive] [ELF Parsing Bugs by Example with Melkor Fuzzer](https://ioactive.com/elf-parsing-bugs-by-example-with-melkor-fuzzer/)
- 2014.10 [pediy] [[原创]用EasyFuzzer 挖掘软件漏洞](https://bbs.pediy.com/thread-193340.htm)
- 2014.08 [websecurify] [Formfuzz - Now Part Of The Classic Pack](https://blog.websecurify.com/2014/08/formfuzz-now-part-of-the-classic-pack.html)
- 2014.07 [debasish] [Releasing Stupid v0.1 - The Dumbest File Format Fuzzer (Python+Pydbg)](http://www.debasish.in/2014/07/releasing-stupid-v01-dumbest-file.html)
- 2014.06 [] [[译]对CVE-2010-3856的模糊测试和利用](http://www.91ri.org/9349.html)
- 2014.05 [corelan] [HITB2014AMS – Day 1 – Harder, Better, Faster Fuzzer: Advances in BlackBox Evolutionary Fuzzing](https://www.corelan.be/index.php/2014/05/29/hitb2014ams-day-1-harder-better-faster-fuzzer-advances-in-blackbox-evolutionary-fuzzing/)
- 2014.05 [bromium] [Understanding how Fuzzing Relates to a Vulnerability like Heartbleed](https://blogs.bromium.com/understanding-how-fuzzing-relates-to-a-vulnerability-like-heartbleed/)
- 2014.05 [techorganic] [From fuzzing to 0-day](https://blog.techorganic.com/2014/05/14/from-fuzzing-to-0-day/)
- 2014.05 [threatstack] [Monitorama 2014: “Warm Fuzzies”](https://www.threatstack.com/blog/monitorama-2014-warm-fuzzies/)
- 2014.04 [websecurify] [Fuzzing With Custom Payloads](https://blog.websecurify.com/2014/04/fuzzing-with-custom-payloads.html)
- 2014.04 [martinvigo] [Lyft, fuzzing and Denial of Service attacks](https://www.martinvigo.com/lyft-fuzzing-and-denial-of-service-attacks/)
- 2014.04 [] [建站之星模糊测试实战之任意文件上传漏洞](http://0day5.com/archives/1504/)
- 2013.11 [tencent] [Fuzz漏洞挖掘漫谈](https://security.tencent.com/index.php/blog/msg/28)
- 2013.11 [] [Fuzz漏洞挖掘漫谈](http://www.91ri.org/7710.html)
- 2013.09 [gdssecurity] [Fuzzing FIX](https://blog.gdssecurity.com/labs/2013/9/24/fuzzing-fix.html)
- 2013.08 [tunnelshade] [Way to fuzz (I learnt it this way :P)](https://tunnelshade.in/blog/2013/08/way-to-fuzz-i-learnt-it-this-way-p/)
- 2013.08 [cmu] [Mining Ubuntu for Interesting Fuzz Targets](https://insights.sei.cmu.edu/cert/2013/08/mining-ubuntu-for-interesting-fuzz-targets.html)
- 2013.08 [mwrinfosecurity] [15 minute guide to fuzzing](https://www.mwrinfosecurity.com/our-thinking/15-minute-guide-to-fuzzing/)
- 2013.07 [pediy] [[原创]文件Fuzz教程系列索引](https://bbs.pediy.com/thread-176420.htm)
- 2013.07 [securiteam] [Fuzzing Samsung Kies](https://blogs.securiteam.com/index.php/archives/2162)
- 2013.05 [] [简单而快速的MySQL注射LOAD_FILE() Fuzzer](http://www.91ri.org/5787.html)
- 2013.04 [debasish] [Fuzzing Monitoring with WinDBG Console Debugger(cdb.exe)](http://www.debasish.in/2013/04/fuzzing-monitoring-with-windbg-console.html)
- 2013.03 [securiteam] [S. Korea Cyber Attack Crashes Navigation Devices. Time to fuzz your GPS?](https://blogs.securiteam.com/index.php/archives/2089)
- 2013.03 [immunityproducts] [Infiltrate Preview - TrueType Font Fuzzing and Vulnerability](https://immunityproducts.blogspot.com/2013/03/infiltrate-preview-truetype-font.html)
- 2013.02 [agarri] [Mutation-based fuzzing of XSLT engines](http://www.agarri.fr/blog/../kom/archives/2013/02/25/mutation-based_fuzzing_of_xslt_engines/index.html)
- 2013.02 [agarri] [Mutation-based fuzzing of XSLT engines](https://www.agarri.fr/blog/archives/2013/02/25/mutation-based_fuzzing_of_xslt_engines/index.html)
- 2012.12 [htbridge] [In-Memory Fuzzing with Java](https://www.htbridge.com/blog/in_memory_fuzzing_with_java.html)
- 2012.12 [websecurify] [Landing Xmlfuzz](https://blog.websecurify.com/2012/12/landing-xmlfuzz.html)
- 2012.11 [cmu] [A Look Inside CERT Fuzzing Tools](https://insights.sei.cmu.edu/cert/2012/11/a-look-inside-cert-fuzzing-tools.html)
- 2012.10 [cmu] [Updates to CERT Fuzzing Tools (BFF 2.6 & FOE 2.0.1)](https://insights.sei.cmu.edu/cert/2012/10/updates-to-cert-fuzzing-tools-bff-26-foe-201.html)
- 2012.10 [securityblog] [Fuzzing with Metasploit](http://securityblog.gr/1381/fuzzing-with-metasploit/)
- 2012.10 [pediy] [[原创]对ActiveX控件进行Fuzzing测试发掘漏洞--希望对新手有帮助](https://bbs.pediy.com/thread-156920.htm)
- 2012.09 [trustwave] [Chat server fuzzing, Part 1. The Beginning](https://www.trustwave.com/Resources/SpiderLabs-Blog/Chat-server-fuzzing,-Part-1--The-Beginning/)
- 2012.09 [sans] [TCP Fuzzing with Scapy](https://isc.sans.edu/forums/diary/TCP+Fuzzing+with+Scapy/14080/)
- 2012.08 [pediy] [[原创]RDP FUZZER DEMO](https://bbs.pediy.com/thread-155354.htm)
- 2012.08 [] [超简单的溢出漏洞发掘技术Fuzzing](http://www.91ri.org/3635.html)
- 2012.07 [freebuf] [脚本本地/远程文件包含/读取及文件名截断漏洞FUZZ工具详解](http://www.freebuf.com/articles/5138.html)
- 2012.07 [] [Fuzz war ftp1.65(科普2)](http://www.91ri.org/3547.html)
- 2012.07 [] [Fuzz war ftp1.65(科普1)](http://www.91ri.org/3518.html)
- 2012.07 [] [Fuzz Testing（模糊测试）](http://www.91ri.org/3437.html)
- 2012.07 [heelan] [Better Interpreter Fuzzing with Clang](https://sean.heelan.io/2012/07/10/better-interpreter-fuzzing-with-clang/)
- 2012.06 [freebuf] [[笔记]AWVS应用之HTTP Fuzzer](http://www.freebuf.com/articles/4442.html)
- 2012.06 [freebuf] [下一代模糊测试框架 – Dizzy](http://www.freebuf.com/sectool/3275.html)
- 2012.05 [insinuator] [Fuzzing VMDK files](https://insinuator.net/2012/05/fuzzing-vmdk-files/)
- 2012.05 [gironsec] [HTTP Fuzzer in PHP](https://www.gironsec.com/blog/2012/05/http-fuzzer-in-php/)
- 2012.04 [cmu] [CERT Basic Fuzzing Framework 2.5 Released](https://insights.sei.cmu.edu/cert/2012/04/cert-basic-fuzzing-framework-25-released.html)
- 2012.03 [taosecurity] [Impressions: Fuzzing](https://taosecurity.blogspot.com/2012/03/impressions-fuzzing.html)
- 2012.03 [pediy] [[原创]非常粗糙的FileFuzz源码[0325更新]](https://bbs.pediy.com/thread-147275.htm)
- 2011.12 [rachelbythebay] [Hive mind: update on "temporal fuzzing"](http://rachelbythebay.com/w/2011/12/01/hivemind/)
- 2011.11 [toolswatch] [rtspFUZZ v0.1 a Real Time Streaming Server Fuzzer](http://www.toolswatch.org/2011/11/rtspfuzz-v0-1-a-real-time-streaming-server-fuzzer/)
- 2011.11 [debasish] [rtspFUZZ a Real Time Streaming Server Fuzzer](http://www.debasish.in/2011/11/rtspfuzz-real-time-streaming-server.html)
- 2011.11 [rachelbythebay] [Multithreaded bug finding, and an idea: temporal fuzzing](http://rachelbythebay.com/w/2011/11/19/sleep/)
- 2011.09 [deepsec] [Talk: Intelligent Bluetooth fuzzing – Why bother?](http://blog.deepsec.net/talk-intelligent-bluetooth-fuzzing-why-bother/)
- 2011.09 [deepsec] [Talk: SMS Fuzzing – SIM Toolkit Attack](http://blog.deepsec.net/talk-sms-fuzzing-sim-toolkit-attack/)
- 2011.09 [] [漫谈Fuzz测试技术](http://www.91ri.org/1970.html)
- 2011.08 [toolswatch] [RegExFuzz Regular expression fuzzing tool 1.1.0 released](http://www.toolswatch.org/2011/08/regexfuzz-regular-expression-fuzzing-tool-1-1-0-released/)
- 2011.08 [toolswatch] [MiniFuzz basic file fuzzing Tool 1.5.5.0 released](http://www.toolswatch.org/2011/08/minifuzz-basic-file-fuzzing-tool-1-5-5-0-released/)
- 2011.05 [toolswatch] [nuf-fuzzer v0.0.1 pre-release available](http://www.toolswatch.org/2011/05/nuf-fuzzer-v0-0-1-pre-release-available/)
- 2011.05 [insinuator] [update for your fuzzing toolkit](https://insinuator.net/2011/05/update-for-your-fuzzing-toolkit/)
- 2011.04 [toolswatch] [DEFENSICS Universal Fuzzer™ – A Global Fuzzer for Everything !!](http://www.toolswatch.org/2011/04/defensics-universal-fuzzer%e2%84%a2-a-global-fuzzer-for-everything/)
- 2011.04 [firebitsbr] [>O que é um Fuzzer em Penetration Testing (Pentesting)](https://firebitsbr.wordpress.com/2011/04/20/o-que-e-um-fuzzer-em-penetration-testing-pentesting/)
- 2011.04 [ptsecurity] [Тестирование методом fuzzing и эксплуатация уязвимости CVE-2010-3856](http://blog.ptsecurity.ru/2011/09/fuzzing-cve-2010-3856.html)
- 2011.04 [firebitsbr] [>Dranzer – fuzz testing ActiveX controls](https://firebitsbr.wordpress.com/2011/04/15/dranzer-fuzz-testing-activex-controls-2/)
- 2011.04 [firebitsbr] [>Dranzer – fuzz testing ActiveX controls](https://firebitsbr.wordpress.com/2011/04/14/dranzer-fuzz-testing-activex-controls/)
- 2011.03 [toolswatch] [OWASP JBroFuzz v2.5 released](http://www.toolswatch.org/2011/03/owasp-jbrofuzz-v2-5-released/)
- 2011.03 [pediy] [[翻译]Fuzzing（一个off-by-one漏洞）](https://bbs.pediy.com/thread-130946.htm)
- 2011.03 [dankaminsky] [Fuzzmarking: Towards Hard Security Metrics For Software Quality?](https://dankaminsky.com/2011/03/11/fuzzmark/)
- 2011.03 [g0tmi1k] [Sickfuzz v0.2](http://blog.g0tmi1k.com/2011/03/sickfuzz-v02/)
- 2011.02 [cmu] [Announcing the CERT Basic Fuzzing Framework 2.0](https://insights.sei.cmu.edu/cert/2011/02/announcing-the-cert-basic-fuzzing-framework-20.html)
- 2011.01 [toolswatch] [Focus on FuzzOr The Oracle Fuzzing Tool](http://www.toolswatch.org/2011/01/focus-on-fuzzor-the-oracle-fuzzing-tool/)
- 2011.01 [sans] [After cross_fuzz leak: More Internet Explorer Vulnerabilities reported](https://isc.sans.edu/forums/diary/After+crossfuzz+leak+More+Internet+Explorer+Vulnerabilities+reported/10210/)
- 2010.12 [toolswatch] [ioctlfuzzer v1.2 released](http://www.toolswatch.org/2010/12/ioctlfuzzer-v1-2-released/)
- 2010.12 [cr4] [Обновление программы IOCTL Fuzzer](http://blog.cr4.sh/2010/12/%D0%BE%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B-ioctl-fuzzer.html)
- 2010.11 [pediy] [[下载]漏洞挖掘工具FileFuzz](https://bbs.pediy.com/thread-125263.htm)
- 2010.11 [corelan] [Metasploit module : HTTP Form field fuzzer](https://www.corelan.be/index.php/2010/11/12/metasploit-module-http-form-field-fuzzer/)
- 2010.10 [corelan] [In Memory Fuzzing](https://www.corelan.be/index.php/2010/10/20/in-memory-fuzzing/)
- 2010.10 [microsoft] [New Tool: SDL Regex Fuzzer](https://cloudblogs.microsoft.com/microsoftsecure/2010/10/12/new-tool-sdl-regex-fuzzer/)
- 2010.09 [cmu] [CERT Basic Fuzzing Framework Update](https://insights.sei.cmu.edu/cert/2010/09/cert-basic-fuzzing-framework-update.html)
- 2010.07 [microsoft] [Writing Fuzzable Code](https://cloudblogs.microsoft.com/microsoftsecure/2010/07/07/writing-fuzzable-code/)
- 2010.05 [cmu] [CERT Basic Fuzzing Framework](https://insights.sei.cmu.edu/cert/2010/05/cert-basic-fuzzing-framework.html)
- 2010.05 [g] [Fuzzing lib released](http://g-laurent.blogspot.com/2010/05/fuzzing-lib-released.html)
- 2010.05 [gdssecurity] [Fuzzing GWT RPC Requests](https://blog.gdssecurity.com/labs/2010/5/6/fuzzing-gwt-rpc-requests.html)
- 2010.03 [pediy] [[翻译]自动化模糊测试ActiveX控件漏洞](https://bbs.pediy.com/thread-108425.htm)
- 2010.01 [pediy] [[翻译]PHP Fuzzing行动——源码审计](https://bbs.pediy.com/thread-105837.htm)
- 2009.11 [g] [Releasing ICMPv4/IP fuzzer prototype](http://g-laurent.blogspot.com/2009/11/releasing-icmpv4ip-fuzzer-prototype.html)
- 2009.10 [corelan] [Fuzzing with Metasploit : Simple FTP fuzzer](https://www.corelan.be/index.php/2009/10/19/fuzzing-with-metasploit-simple-ftp-fuzzer/)
- 2009.05 [willhackforsushi] [SANS Introduces “Fuzzing for Bug Discovery”](http://www.willhackforsushi.com/?p=179)
- 2009.04 [cmu] [Release of Dranzer ActiveX Fuzzing Tool](https://insights.sei.cmu.edu/cert/2009/04/release-of-dranzer-activex-fuzzing-tool.html)
- 2009.01 [rapid7] [Fuzzing Flash For Fun (ASNative)](https://blog.rapid7.com/2009/01/03/fuzzing-flash-for-fun-asnative/)
- 2008.10 [pediy] [[技术专题]软件安全测试（fuzz）之大家一起学2：认识PNG文件格式](https://bbs.pediy.com/thread-75181.htm)
- 2008.10 [pediy] [[技术专题]软件安全测试（fuzz）之大家一起学1: fuzz platform架构](https://bbs.pediy.com/thread-75032.htm)
- 2008.09 [hboeck] [Fuzzing is easy](https://blog.hboeck.de/archives/651-Fuzzing-is-easy.html)
- 2008.08 [pediy] [看雪读书月]软件漏洞挖掘Fuzz工具之五-autodafe](https://bbs.pediy.com/thread-70319.htm)
- 2008.08 [pediy] [[看雪读书月]软件漏洞挖掘Fuzz工具之四-Dfuz](https://bbs.pediy.com/thread-70045.htm)
- 2008.08 [pediy] [[看雪读书月]软件漏洞挖掘Fuzz工具之三-入门篇](https://bbs.pediy.com/thread-69910.htm)
- 2008.07 [pediy] [[技术专题]软件漏洞挖掘Fuzz工具之二_Bunny](https://bbs.pediy.com/thread-69742.htm)
- 2008.07 [morepypy] [Finding Bugs in PyPy with a Fuzzer](https://morepypy.blogspot.com/2008/07/finding-bugs-in-pypy-with-fuz.html)
- 2007.09 [microsoft] [Fuzz Testing at Microsoft and the Triage Process](https://cloudblogs.microsoft.com/microsoftsecure/2007/09/20/fuzz-testing-at-microsoft-and-the-triage-process/)
- 2007.02 [pediy] [《The Shellcoder's handbook》第十五_Fuzzing的技巧](https://bbs.pediy.com/thread-39220.htm)
- 2006.08 [immunityinc] [MSRPC Fuzzing](https://www.immunityinc.com/downloads/msrpc_fuzzing_paper.odt)
- 2006.07 [jeremiahgrossman] [How is fuzzing like AI?](http://blog.jeremiahgrossman.com/2006/07/how-is-fuzzing-like-ai.html)
- 2006.03 [recurity] [The big Fuzz](http://blog.recurity-labs.com/2006-03-13/21_14_49)
***
- 2019.06 [arxiv] [[1906.11133] A Review of Machine Learning Applications in Fuzzing](https://arxiv.org/abs/1906.11133)
- 2019.06 [arxiv] [[1906.00621] Evolutionary Fuzzing of Android OS Vendor System Services](https://arxiv.org/abs/1906.00621)
- 2019.05 [arxiv] [[1905.13055] MoonLight: Effective Fuzzing with Near-Optimal Corpus Distillation](https://arxiv.org/abs/1905.13055)
- 2019.05 [arxiv] [[1905.12228] Matryoshka: fuzzing deeply nested branches](https://arxiv.org/abs/1905.12228)
- 2019.05 [arxiv] [[1905.10499] PTrix: Efficient Hardware-Assisted Fuzzing for COTS Binary](https://arxiv.org/abs/1905.10499)
- 2019.05 [arxiv] [[1905.10311] SpecFuzz: Bringing Spectre-type vulnerabilities to the surface](https://arxiv.org/abs/1905.10311)
- 2019.05 [arxiv] [[1905.09532] SynFuzz: Efficient Concolic Execution via Branch Condition Synthesis](https://arxiv.org/abs/1905.09532)
- 2019.05 [arxiv] [[1906.03043] A Fuzzy-Fuzzy Vault Scheme](https://arxiv.org/abs/1906.03043)
- 2019.05 [arxiv] [[1905.07561] Discrete Logarithmic Fuzzy Vault Scheme](https://arxiv.org/abs/1905.07561)
- 2019.05 [arxiv] [[1905.07147] Targeted Greybox Fuzzing with Static Lookahead Analysis](https://arxiv.org/abs/1905.07147)
- 2019.05 [arxiv] [[1905.06944] Harvey: A Greybox Fuzzer for Smart Contracts](https://arxiv.org/abs/1905.06944)
- 2019.04 [arxiv] [[1904.12111] A Novel Fuzzy Search Approach over Encrypted Data with Improved Accuracy and Efficiency](https://arxiv.org/abs/1904.12111)
- 2019.04 [arxiv] [[1904.08790] Intrusion Detection Mechanism Using Fuzzy Rule Interpolation](https://arxiv.org/abs/1904.08790)
- 2019.04 [arxiv] [[1904.04710] Secure Biometric-based Remote Authentication Protocol using Chebyshev Polynomials and Fuzzy Extractor](https://arxiv.org/abs/1904.04710)
- 2019.03 [arxiv] [[1904.00264] A New Biometric Template Protection using Random Orthonormal Projection and Fuzzy Commitment](https://arxiv.org/abs/1904.00264)
- 2019.03 [arxiv] [[1903.05675] Fuzzy Rough Set Feature Selection to Enhance Phishing Attack Detection](https://arxiv.org/abs/1903.05675)
- 2019.02 [arxiv] [[1902.02538] Optimizing seed inputs in fuzzing with machine learning](https://arxiv.org/abs/1902.02538)
- 2018.11 [arxiv] [[1811.09447] Smart Greybox Fuzzing](https://arxiv.org/abs/1811.09447)
- 2018.11 [arxiv] [[1811.08954] Fuzzy Rule Interpolation and SNMP-MIB for Emerging Network Abnormality](https://arxiv.org/abs/1811.08954)
- 2018.11 [arxiv] [[1811.07005] DifFuzz: Differential Fuzzing for Side-Channel Analysis](https://arxiv.org/abs/1811.07005)
- 2018.10 [arxiv] [[1810.04755] Leveraging Textual Specifications for Grammar-based Fuzzing of Network Protocols](https://arxiv.org/abs/1810.04755)
- 2018.09 [arxiv] [[1809.01266] DeepHunter: Hunting Deep Neural Network Defects via Coverage-Guided Fuzzing](https://arxiv.org/abs/1809.01266)
- 2018.08 [arxiv] [[1808.09700] Evaluating Fuzz Testing](https://arxiv.org/abs/1808.09700)
- 2018.07 [arxiv] [[1807.07875] Learning Inputs in Greybox Fuzzing](https://arxiv.org/abs/1807.07875)
- 2018.07 [arxiv] [[1807.05620] NEUZZ: Efficient Fuzzing with Neural Program Smoothing](https://arxiv.org/abs/1807.05620)
- 2018.07 [arxiv] [[1807.03932] ContractFuzzer: Fuzzing Smart Contracts for Vulnerability Detection](https://arxiv.org/abs/1807.03932)
- 2018.07 [arxiv] [[1807.02606] SmartSeed: Smart Seed Generation for Efficient Fuzzing](https://arxiv.org/abs/1807.02606)
- 2018.07 [arxiv] [[1807.01838] Improving Fuzzing Using Software Complexity Metrics](https://arxiv.org/abs/1807.01838)
- 2018.05 [arxiv] [[1805.07487] Lightweight (Reverse) Fuzzy Extractor with Multiple Referenced PUF Responses](https://arxiv.org/abs/1805.07487)
- 2018.03 [arxiv] [[1803.11377] Fuzzy Graph Modelling of Anonymous Networks](https://arxiv.org/abs/1803.11377)
- 2018.01 [arxiv] [[1801.04589] Deep Reinforcement Fuzzing](https://arxiv.org/abs/1801.04589)
- 2017.11 [arxiv] [[1711.02807] Faster Fuzzing: Reinitialization with Deep Neural Models](https://arxiv.org/abs/1711.02807)
- 2017.09 [arxiv] [[1709.07101] FairFuzz: Targeting Rare Branches to Rapidly Increase Greybox Fuzz Testing Coverage](https://arxiv.org/abs/1709.07101)
- 2017.08 [arxiv] [[1709.01597] Multi-color image compression-encryption algorithm based on chaotic system and fuzzy transform](https://arxiv.org/abs/1709.01597)
- 2017.06 [arxiv] [[1706.00206] Static Exploration of Taint-Style Vulnerabilities Found by Fuzzing](https://arxiv.org/abs/1706.00206)
- 2017.05 [arxiv] [[1705.06715] Continuous Implicit Authentication for Mobile Devices based on Adaptive Neuro-Fuzzy Inference System](https://arxiv.org/abs/1705.06715)
- 2017.01 [arxiv] [[1701.07232] Learn&Fuzz: Machine Learning for Input Fuzzing](https://arxiv.org/abs/1701.07232)
- 2016.09 [arxiv] [[1611.03343] Fuzzy Logic-based Implicit Authentication for Mobile Access Control](https://arxiv.org/abs/1611.03343)
- 2016.03 [arxiv] [[1603.06830] Fuzzy Commitment Scheme based on Reed Solomon Codes](https://arxiv.org/abs/1603.06830)
- 2014.08 [arxiv] [[1408.3985] Offline Signature-Based Fuzzy Vault (OSFV: Review and New Results](https://arxiv.org/abs/1408.3985)
- 2014.06 [arxiv] [[1406.1154] Decodability Attack against the Fuzzy Commitment Scheme with Public Feature Transforms](https://arxiv.org/abs/1406.1154)
- 2014.05 [arxiv] [[1405.3272] Fast and Fuzzy Private Set Intersection](https://arxiv.org/abs/1405.3272)
- 2014.03 [arxiv] [[1403.0766] Service-Fingerprinting mittels Fuzzing](https://arxiv.org/abs/1403.0766)
- 2014.03 [arxiv] [[1403.0439] Verbesserung von OS- und Service-Fingerprinting mittels Fuzzing](https://arxiv.org/abs/1403.0439)
- 2013.12 [arxiv] [[1312.5225] Security of the Improved Fuzzy Vault Scheme in the Presence of Record Multiplicity (Full Version)](https://arxiv.org/abs/1312.5225)
- 2013.04 [arxiv] [[1304.4028] A Fuzzy Logic Based Certain Trust Model for E-Commerce](https://arxiv.org/abs/1304.4028)
- 2013.04 [arxiv] [[1304.3535] Current Studies On Intrusion Detection System, Genetic Algorithm And Fuzzy Logic](https://arxiv.org/abs/1304.3535)
- 2013.03 [arxiv] [[1303.0459] An Advanced Certain Trust Model Using Fuzzy Logic and Probabilistic Logic theory](https://arxiv.org/abs/1303.0459)
- 2013.02 [arxiv] [[1302.4233] The Robust Digital Image Watermarking using Quantization and Fuzzy Logic Approach in DWT Domain](https://arxiv.org/abs/1302.4233)
- 2013.02 [arxiv] [[1302.0629] Phishing Dynamic Evolving Neural Fuzzy Framework for Online Detection Zero-day Phishing Email](https://arxiv.org/abs/1302.0629)
- 2012.11 [arxiv] [[1211.2087] Secured Wireless Communication using Fuzzy Logic based High Speed Public-Key Cryptography (FLHSPKC)](https://arxiv.org/abs/1211.2087)
- 2012.11 [arxiv] [[1211.3682] Fuzzy Keyword Search over Encrypted Data using Symbol-Based Trie-traverse Search Scheme in Cloud Computing](https://arxiv.org/abs/1211.3682)
- 2012.10 [arxiv] [[1210.7190] Subspace Fuzzy Vault](https://arxiv.org/abs/1210.7190)
- 2012.04 [arxiv] [[1204.6416] FuGeIDS: Fuzzy Genetic paradigms in Intrusion Detection Systems](https://arxiv.org/abs/1204.6416)
- 2011.07 [arxiv] [[1107.1600] On fuzzy syndrome hashing with LDPC coding](https://arxiv.org/abs/1107.1600)
- 2010.12 [arxiv] [[1101.0173] Maximizing Strength of Digital Watermarks using Fuzzy Logic](https://arxiv.org/abs/1101.0173)
- 2010.11 [arxiv] [[1011.3101] A New Fuzzy MCDM Framework to Evaluate E-Government Security Strategy](https://arxiv.org/abs/1011.3101)
- 2010.08 [arxiv] [[1008.0807] Performance of the Fuzzy Vault for Multiple Fingerprints (Extended Version)](https://arxiv.org/abs/1008.0807)
- 2010.05 [arxiv] [[1005.4501] Fuzzy Aided Application Layer Semantic Intrusion Detection System - FASIDS](https://arxiv.org/abs/1005.4501)
- 2009.01 [arxiv] [[0901.1095] FAIR: Fuzzy-based Aggregation providing In-network Resilience for real-time Wireless Sensor Networks](https://arxiv.org/abs/0901.1095)
- 2008.09 [arxiv] [[0809.1318] A Fuzzy Commitment Scheme](https://arxiv.org/abs/0809.1318)
- 2008.07 [arxiv] [[0807.0799] An Improved Robust Fuzzy Extractor](https://arxiv.org/abs/0807.0799)
- 2007.10 [arxiv] [[0710.5425] Fuzzy Private Matching (Extended Abstract)](https://arxiv.org/abs/0710.5425)
- 2007.08 [arxiv] [[0708.2974] The Fuzzy Vault for fingerprints is Vulnerable to Brute Force Attack](https://arxiv.org/abs/0708.2974)
- 2007.05 [arxiv] [[0705.3740] Optimal Iris Fuzzy Sketches](https://arxiv.org/abs/0705.3740)
- 2006.02 [arxiv] [[cs/0602007] Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data](https://arxiv.org/abs/cs/0602007)
***
- 2019.12 [mediacccde] [36C3 - No source, no problem! High speed binary fuzzing](https://www.youtube.com/watch?v=ysZ9w3PcYVU)
- 2019.12 [HackersOnBoard] [DEF CON 27 - How To Improve Coverage-Guided Fuzzing and Find New 0days in Tough Targets](https://www.youtube.com/watch?v=EtiK-eqo7_U)
- 2019.12 [DefCampRO] [Fuzzing the Stack for Fun and Profit at DefCamp 2019](https://www.youtube.com/watch?v=qCMfrbpuCBk)
- 2019.10 [HackersOnBoard] [Follow the White Rabbit Simplifying Fuzz Testing Using FuzzExMachina](https://www.youtube.com/watch?v=xtXa21oM__Y)
- 2019.10 [HackersOnBoard] [Black Hat USA 2017 Automated Testing of Crypto Software Using Differential Fuzzing](https://www.youtube.com/watch?v=o94yfQWCMPw)
- 2019.10 [HackersOnBoard] [Black Hat USA 2017 WiFuzz Detecting & Exploiting Logical Flaws in the Wi Fi Cryptographic Handshake](https://www.youtube.com/watch?v=rshtK48DSNY)
- 2019.09 [hitbsecconf] [#HITBGSEC D2: Launching Feedback-Driven Fuzzing On TrustZone TEE - Andrey Akimov](https://www.youtube.com/watch?v=yb7KGznzczs)
- 2019.09 [hitbsecconf] [#HITBGSEC D2: Creating A Fuzzer For Diameter And LTE Telecom Protocols - Sergey Mashukov](https://www.youtube.com/watch?v=zLBZTqVSkoE)
- 2019.09 [hitbsecconf] [#HITBGSEC D1: Advanced Mutation Fuzzing Method For Wireless Protocols - Lidong Li and Xianzi Kong](https://www.youtube.com/watch?v=uBmndjvqIGU)
- 2019.08 [mediacccde] [(emulate|fuzz|break) kernels](https://www.youtube.com/watch?v=z1ChRLP2Kzs)
- 2019.08 [PositiveTechnologies] [Fuzzing 101](https://www.youtube.com/watch?v=KouPDI9laUE)
- 2019.07 [SecPgh] [Death by Thumb Drive: File System Fuzzing With Cert BFF - Will Dormann](https://www.youtube.com/watch?v=8nZlfi578XM)
- 2019.06 [GynvaelEN] [Hacking Livestream #80: Fuzzing Gosu](https://www.youtube.com/watch?v=_8ejZNi5SpE)
- 2019.06 [hitbsecconf] [#HITB2019AMS D1T2 - For The Win: The Art Of The Windows Kernel Fuzzing - Guangming Liu](https://www.youtube.com/watch?v=9FPuKfwucsw)
- 2019.06 [hitbsecconf] [#HITB2019AMS D1T2 - Hourglass Fuzz: A Quick Bug Hunting Method - M. Li, T. Han, L. Jiang and L. Wu](https://www.youtube.com/watch?v=dloXHP5e5Fs)
- 2019.06 [hitbsecconf] [#HITB2019AMS D1T2 - fn_fuzzy: Fast Multiple Binary Diffing Triage With IDA - Takahiro Haruyama](https://www.youtube.com/watch?v=kkvNebE9amY)
- 2019.04 [h2hconference] [Playing Web Fuzzer - Wagner Elias - H2HC 2009](https://www.youtube.com/watch?v=ZXsjqD_i8bk)
- 2019.04 [mediacccde] [Easterhegg 2019 - Black-Box Live Protocol Fuzzing](https://www.youtube.com/watch?v=GtNPTj_k2Uc)
- 2019.04 [OffensiveCon] [OffensiveCon19 - Samuel Groß - FuzzIL: Guided Fuzzing for JavaScript Engines](https://www.youtube.com/watch?v=OHjq9Y66yfc)
- 2019.04 [OffensiveCon] [OffensiveCon19 - Ned Williamson - Modern Source Fuzzing](https://www.youtube.com/watch?v=xzG0pLM4Q64)
- 2019.04 [NDSSSymposium] [NDSS 2019 - Life after Speech Recognition: Fuzzing Semantic Misinterpretation for Voice Assistants](https://www.youtube.com/watch?v=CNySUmEV9Ks)
- 2019.04 [NDSSSymposium] [NDSS 2019 PeriScope: An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary](https://www.youtube.com/watch?v=GDf4IIEhl0Y)
- 2019.04 [NDSSSymposium] [NDSS 2019 REDQUEEN: Fuzzing with Input-to-State Correspondence](https://www.youtube.com/watch?v=9JpanJ29r_U)
- 2019.04 [NDSSSymposium] [NDSS 2019 Send Hardest Problems My Way: Probabilistic Path Prioritization for Hybrid Fuzzing](https://www.youtube.com/watch?v=HJ3rBmrEifQ)
- 2019.04 [TROOPERScon] [TR19: Evolution of kernel fuzzers in NetBSD](https://www.youtube.com/watch?v=_-ftXNqCcI4)
- 2019.03 [LoiLiangYang] [Cross Site Scripting and Fuzzing (Cybersecurity)](https://www.youtube.com/watch?v=zGb31fvPma8)
- 2019.02 [MarcusNiemietz] [Rene Freingruber: "An overview on modern fuzzing techniques"](https://www.youtube.com/watch?v=T3X9VJAi82U)
- 2018.12 [HackerSploit] [DotDotPwn - Directory Traversal Fuzzing](https://www.youtube.com/watch?v=kkSzmhJD73s)
- 2018.12 [hitbsecconf] [#HITB2018DXB D1T1: Virtualizing IoT With Code Coverage Guided Fuzzing - KJ Lau and Nguyen Anh Quynh](https://www.youtube.com/watch?v=BGqkfKV1KFk)
- 2018.10 [PancakeNopcode] [r2con2018 - Fuzzing with Erlamsa - by dark_key](https://www.youtube.com/watch?v=obZ7bhUwrtQ)
- 2018.06 [SECConsult] [Finding security vulnerabilities with modern fuzzing techniques - Rene Freingruber (RuhrSec 2018)](https://www.youtube.com/watch?v=V-DiwxoeXMs)
- 2018.06 [HackmanitGmbH] [RuhrSec 2018: "Finding security vulnerabilities with modern fuzzing techniques", Rene Freingruber](https://www.youtube.com/watch?v=KFmeHz_vxfo)
- 2018.03 [OffensiveCon] [OffensiveCon18 - Vitaly Nikolenko - Concolic Testing for Kernel Fuzzing and Vulnerability Discovery](https://www.youtube.com/watch?v=mpfKN1URqdQ)
- 2018.03 [NDSSSymposium] [NDSS 2018 - IoTFuzzer: Discovering Memory Corruptions in IoT Through App-based Fuzzing](https://www.youtube.com/watch?v=Ys2FBmdbdIw)
- 2018.03 [NDSSSymposium] [NDSS 2018 - What You Corrupt Is Not What You Crash: Challenges in Fuzzing Embedded Devices](https://www.youtube.com/watch?v=OjlKXf1IUBg)
- 2018.03 [NDSSSymposium] [NDSS 2018 Enhancing Memory Error Detection for Large-Scale Applications and Fuzz Testing](https://www.youtube.com/watch?v=7_wh9gBvisM)
- 2018.01 [ZeroNights] [Nguyen Anh Quynh - Building Advanced Coverage guided Fuzzer for Program Binaries](https://www.youtube.com/watch?v=8pPo5ubKxW8)
- 2017.12 [GynvaelEN] [Hacking Livestream #41: Fuzzing again](https://www.youtube.com/watch?v=luMfnlycAFI)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 9: In-memory Fuzzing HashCalc using WinAppDbg](https://www.youtube.com/watch?v=XUyJahrT21Q)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 10: In-memory Fuzzing HashCalc using DynamoRio](https://www.youtube.com/watch?v=FEJGlgBeUJ8)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 12: Using PageHeap and ApplicationVerifier to find bugs in mimikatz](https://www.youtube.com/watch?v=okbqZhvsct8)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 5: Adobe Reader Breakpoint Instrumentation](https://www.youtube.com/watch?v=a-7-AE079-Q)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 6: Extract Coverage Information using DynamoRio](https://www.youtube.com/watch?v=Ur_E9c2vX1A)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 8: How to find the in-memory fuzzing function (HashCalc)](https://www.youtube.com/watch?v=bzM2sM0fpWg)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 11: Fuzzing the CTF chat binary with a custom fuzzer](https://www.youtube.com/watch?v=pmLnba0J5wE)
- 2017.11 [SECConsult] [The Art of Fuzzing - Demo 1: Find flaws in CTF Chat binary](https://www.youtube.com/watch?v=QNrecApGtJA)
- 2017.08 [KirkJackson] [Huzzer, the tree based generational mutating HTTP fuzzer - Matthew Daley](https://www.youtube.com/watch?v=CMTzHGJkerA)
- 2017.07 [TechnicalMujeeb] [ínfσrmαtíσn gαthєríng ín αndrσíd tєrmuх αngrч fuzzєr ín híndí](https://www.youtube.com/watch?v=P7iMzsTKTug)
- 2017.05 [GynvaelEN] [Hacking Livestream #19: Genetic fuzzing (implementation)](https://www.youtube.com/watch?v=HN_tI601jNU)
- 2017.04 [GynvaelEN] [Hacking Livestream #18: Genetic fuzzing (theory)](https://www.youtube.com/watch?v=JhsHGms_7JQ)
- 2017.04 [NDSSSymposium] [NDSS 2017: VUzzer: Application-aware Evolutionary Fuzzing](https://www.youtube.com/watch?v=lfOGLUqpnvU)
- 2017.04 [GynvaelEN] [Hacking Livestream #17: Basics of fuzzing](https://www.youtube.com/watch?v=BrDujogxYSk)
- 2017.02 [BsidesLisbon] [BSides Lisbon 2016 - Keynote - The Smart Fuzzer Revolution by Dan Guido](https://www.youtube.com/watch?v=g1E2Ce5cBhI)
- 2017.01 [HackersOnBoard] [DEF CON 24 - Platform Agnostic Kernel Fuzzing](https://www.youtube.com/watch?v=rv5PqCEVG_U)
- 2016.02 [ZeroNights] [Jeremy Brown — Browser Fuzzing with a Twist (and a Shake)](https://www.youtube.com/watch?v=i8qDnphBMx4)
- 2016.02 [ZeroNights] [Nikolaos Naziridis, Zisis Sialveras — Choronzon: an approach to knowedgebased evolutionary fuzzing](https://www.youtube.com/watch?v=WafsYOCl8hQ)
- 2014.10 [MarcusNiemietz] [Tuomas Kärkkäinen - Fuzzing at Scale and in Style](https://www.youtube.com/watch?v=eY4Psg44DcY)
# 贡献
内容为系统自动导出, 有任何问题请提issue