Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with fuzzer

A curated list of projects in awesome lists tagged with fuzzer .

https://github.com/ffuf/ffuf

Fast web fuzzer written in Go

fuzzer infosec pentesting web

Last synced: 21 Oct 2025

https://github.com/thekingofduck/fuzzdicts

You Know, For WEB Fuzzing ! 日站用的字典。

directory fuzz-testing fuzzer fuzzing paramter password pentesting username wfuzz

Last synced: 14 May 2025

https://github.com/TheKingOfDuck/fuzzDicts

You Know, For WEB Fuzzing ! 日站用的字典。

directory fuzz-testing fuzzer fuzzing paramter password pentesting username wfuzz

Last synced: 05 Apr 2025

https://github.com/aflplusplus/aflplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

afl afl-compiler afl-fuzz afl-fuzzer afl-gcc fuzz-testing fuzzer fuzzer-afl fuzzing instrumentation qemu security testing unicorn-emulator unicorn-mode

Last synced: 12 May 2025

https://github.com/google/syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

fuzz-testing fuzzer fuzzing kernel linux security security-tools security-vulnerability testing

Last synced: 11 May 2025

https://github.com/AFLplusplus/AFLplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

afl afl-compiler afl-fuzz afl-fuzzer afl-gcc fuzz-testing fuzzer fuzzer-afl fuzzing instrumentation qemu security testing unicorn-emulator unicorn-mode

Last synced: 02 Apr 2025

https://github.com/antonio-morales/Fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

afl afl-fuzz bug-hunting bugbounty education fuzz-testing fuzzer fuzzilli fuzzing hacking security testing vulnerabilities

Last synced: 01 Apr 2025

https://github.com/antonio-morales/fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

afl afl-fuzz bug-hunting bugbounty education fuzz-testing fuzzer fuzzilli fuzzing hacking security testing vulnerabilities

Last synced: 25 Mar 2025

https://github.com/crytic/echidna

Ethereum smart contract fuzzer

ethereum evm fuzzer security smart-contracts solidity testing

Last synced: 13 May 2025

https://github.com/1n3/blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

active application automated bugbounty csrf fuzzer lfi osint owasp passive python rce rfi scan scanner spider sqli vulnerability web xss

Last synced: 13 Apr 2025

https://github.com/1N3/BlackWidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

active application automated bugbounty csrf fuzzer lfi osint owasp passive python rce rfi scan scanner spider sqli vulnerability web xss

Last synced: 30 Mar 2025

https://github.com/0vercl0k/wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

bochs bochscpu code-coverage fuzz-testing fuzzer fuzzing kvm-api security snapshot-fuzzer testing winhv

Last synced: 14 May 2025

https://github.com/Endava/cats

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

api fuzzer java openapi rest-api rest-fuzzer swagger testing

Last synced: 10 May 2025

https://github.com/endava/cats

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

api fuzzer java openapi rest-api rest-fuzzer swagger testing

Last synced: 14 May 2025

https://github.com/codeintelligencetesting/jazzer

Coverage-guided, in-process fuzzing for the JVM

clojure fuzzer fuzzing java jni jvm kotlin security

Last synced: 14 May 2025

https://github.com/CodeIntelligenceTesting/jazzer

Coverage-guided, in-process fuzzing for the JVM

clojure fuzzer fuzzing java jni jvm kotlin security

Last synced: 04 Apr 2025

https://github.com/wireghoul/dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

fuzzer penetration-testing perl security traversal

Last synced: 16 May 2025

https://github.com/angorafuzzer/angora

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

afl data-flow-analysis fuzzer fuzzing security symbolic-execution taint-analysis

Last synced: 02 Apr 2025

https://github.com/AngoraFuzzer/Angora

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

afl data-flow-analysis fuzzer fuzzing security symbolic-execution taint-analysis

Last synced: 27 Sep 2025

https://github.com/f4pga/prjxray

Documenting the Xilinx 7-series bit-stream format.

artix artix7 bitstream fpga fuzzer kintex7 symbiflow toolchain tools vivado xilinx xilinx-fpga

Last synced: 22 Apr 2025

https://github.com/mozillasecurity/funfuzz

A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.

fuzzer javascript-fuzzing jsfunfuzz spidermonkey-engine

Last synced: 04 Apr 2025

https://github.com/MozillaSecurity/funfuzz

A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.

fuzzer javascript-fuzzing jsfunfuzz spidermonkey-engine

Last synced: 13 Mar 2025

https://github.com/Fuzzapi/fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

api automation fuzzer rails ruby security security-vulnerability

Last synced: 02 Apr 2025

https://github.com/webfuzzing/evomaster

The first open-source AI-driven tool for automatically generating system-level test cases (also known as fuzzing) for web/enterprise applications. Currently targeting whitebox and blackbox testing of Web APIs, like REST, GraphQL and RPC (e.g., gRPC and Thrift).

api-rest api-testing evolutionary-algorithms fuzzer fuzzing graphql grpc java kotlin rest rpc-api search-based-software-testing test-case-generation testing thrift

Last synced: 24 Sep 2025

https://github.com/fuzzitdev/jsfuzz

coverage guided fuzz testing for javascript

fuzz-testing fuzzer fuzzing javascript testing

Last synced: 28 Mar 2025

https://github.com/hfiref0x/ntcall64

Windows NT x64 syscall fuzzer

brute-force-attacks c fuzzer ntos win64

Last synced: 04 Apr 2025

https://github.com/liamg/scout

🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs

fuzzer hackthebox pentesting security url url-fuzzer

Last synced: 05 Apr 2025

https://github.com/matusf/openapi-fuzzer

Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!

fuzzer fuzzing openapi rust

Last synced: 16 May 2025

https://github.com/WebFuzzing/EvoMaster

The first open-source AI-driven tool for automatically generating system-level test cases (also known as fuzzing) for web/enterprise applications. Currently targeting whitebox and blackbox testing of Web APIs, like REST, GraphQL and RPC (e.g., gRPC and Thrift).

api-rest api-testing evolutionary-algorithms fuzzer fuzzing graphql grpc java kotlin rest rpc-api search-based-software-testing test-case-generation testing thrift

Last synced: 27 Feb 2025

https://github.com/MozillaSecurity/dharma

Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.

context-free fuzzer fuzzing generation grammar python random

Last synced: 22 Apr 2025

https://github.com/mozillasecurity/dharma

Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.

context-free fuzzer fuzzing generation grammar python random

Last synced: 30 Dec 2025

https://github.com/c0dejump/HawkScan

Security Tool for Reconnaissance and Information Gathering on a website. (python 3.x)

bugbounty fuzzer hawkscan information-gathering reconnaissance web

Last synced: 11 Jul 2025

https://github.com/KissPeter/APIFuzzer

Fuzz test your application using your OpenAPI or Swagger API definition without coding

api-blueprint fuzz fuzzer openapi python3 swagger

Last synced: 10 May 2025

https://github.com/loiclec/fuzzcheck-rs

Modular, structure-aware, and feedback-driven fuzzing engine for Rust functions

coverage-guided-fuzzing fuzzer fuzzing grammar-fuzzer property-based-testing rust testing

Last synced: 02 Apr 2025

https://github.com/anmolksachan/TheTimeMachine

Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

automate bugbounty fuzzer fuzzing jira lfi openredirect osint parameter scanner xss

Last synced: 07 Sep 2025

https://github.com/uds-se/formatfuzzer

FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs.

binary fuzzer fuzzing inputs parsing testing

Last synced: 05 Apr 2025

https://github.com/rc0r/afl-utils

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

afl automation crash-reporting fuzzer fuzzing job-management python-3 security triage

Last synced: 03 Oct 2025

https://github.com/uds-se/FormatFuzzer

FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs.

binary fuzzer fuzzing inputs parsing testing

Last synced: 27 Sep 2025

https://github.com/dzonerzy/goWAPT

Go Web Application Penetration Test

fuzzer hack injection scan-fuzzing sql tool vulnerability wapt wfuzz wordlist xss

Last synced: 11 Jul 2025

https://github.com/d4rckh/vaf

Vaf is a cross-platform very advanced and fast web fuzzer written in nim

bruteforce bug-bounty bugbounty burpsuite fuzzer fuzzing hacking hacking-tools nim penetration-testing pentest-tool recon security-tools vaf web xss

Last synced: 09 Apr 2025

https://github.com/candy-lang/candy

🍭 A sweet, functional programming language that is robust, minimalistic, and expressive.

compiler fuzzer hacktoberfest language language-server programming-language rust

Last synced: 10 Apr 2025

https://github.com/codeintelligencetesting/jazzer.js

Coverage-guided, in-process fuzzing for Node.js

fuzzer fuzzing javascript nodejs security testing typescript

Last synced: 15 May 2025

https://github.com/CodeIntelligenceTesting/jazzer.js

Coverage-guided, in-process fuzzing for Node.js

fuzzer fuzzing javascript nodejs security testing typescript

Last synced: 07 May 2025

https://github.com/trailofbits/protofuzz

Google Protocol Buffers message generator

fuzzer protobuf protocol-buffers

Last synced: 13 Apr 2025

https://github.com/ackee-blockchain/trident

Rust-based framework to Fuzz Solana programs, designed to help you ship secure code.

anchor fuzz fuzz-testing fuzzer fuzzing rust solana

Last synced: 15 May 2025

https://github.com/ttdennis/fpicker

fpicker is a Frida-based fuzzing suite supporting various modes (including AFL++ in-process fuzzing)

frida fuzzer in-process

Last synced: 11 Jul 2025

https://github.com/d0c-s4vage/gramfuzz

gramfuzz is a grammar-based fuzzer that lets one define complex grammars to generate text and binary data formats.

complex-grammars fuzzer fuzzing grammar parsing

Last synced: 11 Sep 2025

https://github.com/lifting-bits/grr

High-throughput fuzzer and emulator of DECREE binaries

decree emulator fuzzer

Last synced: 02 Apr 2025

https://github.com/SoftSec-KAIST/CodeAlchemist

CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines (NDSS '19)

code-generation fsharp fuzzer js-fuzzing

Last synced: 11 Apr 2025

https://github.com/softsec-kaist/codealchemist

CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines (NDSS '19)

code-generation fsharp fuzzer js-fuzzing

Last synced: 16 Oct 2025

https://github.com/rog3rsm1th/frelatage

Coverage-based fuzzer for python applications

fuzz-testing fuzzer fuzzing python python3 security testing

Last synced: 11 Sep 2025

https://github.com/FuzzAnything/Hopper

Hopper is a tool for generating fuzzing test cases for libraries automatically using interpretative fuzzing.

afl api-testing binary fuzz-driver fuzzer fuzzing fuzzing-framework interpreter library-testing rust security testing

Last synced: 18 Apr 2025

https://github.com/fuzzitdev/javafuzz

coverage guided fuzz testing for java

fuzz-testing fuzzer fuzzing java testing

Last synced: 27 Feb 2025

https://github.com/SoftSec-KAIST/Fuzzing-Survey

The Art, Science, and Engineering of Fuzzing: A Survey

fuzzer fuzzing genealogy-database visualization

Last synced: 10 May 2025

https://github.com/softsec-kaist/fuzzing-survey

The Art, Science, and Engineering of Fuzzing: A Survey

fuzzer fuzzing genealogy-database visualization

Last synced: 12 Apr 2025

https://github.com/sslab-gatech/janus

Janus: a state-of-the-art file system fuzzer on Linux

btrfs ext4 f2fs filesystem fuzzer fuzzing lkl

Last synced: 02 Sep 2025

https://github.com/henshin/filebuster

An extremely fast and flexible web fuzzer

brute-force directory discovery fast files fuzzer http perl wordlist

Last synced: 02 Apr 2025

https://github.com/Ackee-Blockchain/trident

Rust-based framework to Fuzz Solana programs, designed to help you ship secure code.

anchor fuzz fuzz-testing fuzzer fuzzing rust solana

Last synced: 11 Dec 2025

https://github.com/prompt-security/ps-fuzz

Make your GenAI Apps Safe & Secure :rocket: Test & harden your system prompt

ai ai-fuzzer fuzzer generative-ai llm llm-fuzzer security security-tools system-prompt-hardener

Last synced: 29 Apr 2025

https://github.com/nescau-ufla/fuzzingtool

Software for fuzzing, used on web application pentestings.

bruteforce fuzzer fuzzing pentesting-tools python3 web web-fuzzer

Last synced: 05 Apr 2025

https://github.com/michaelstott/crlf-injection-scanner

Command line tool for testing CRLF injection on a list of domains.

bugbounty cli crlf fuzzer fuzzing security-vulnerability

Last synced: 14 Apr 2025

https://github.com/softsec-kaist/eclipser

Grey-box Concolic Testing on Binary Code (ICSE '19)

concolic-testing fsharp fuzzer fuzzing testcase-generator

Last synced: 11 Apr 2025

https://github.com/softsec-kaist/smartian

Smartian: Enhancing Smart Contract Fuzzing with Static and Dynamic Data-Flow Analyses (ASE '21)

fsharp fuzzer fuzzing smart-contract-testing static-analyzer

Last synced: 05 Apr 2025

https://github.com/SoftSec-KAIST/Eclipser

Grey-box Concolic Testing on Binary Code (ICSE '19)

concolic-testing fsharp fuzzer fuzzing testcase-generator

Last synced: 19 Apr 2025

https://github.com/tno-s3/wuppiefuzz

A coverage-guided REST API fuzzer developed on top of LibAFL

api-fuzzer fuzzer fuzzing openapi rest-api-test

Last synced: 21 Oct 2025

https://github.com/belane/cloudhunter

AWS, Azure, Alibaba and Google bucket scanner

alibaba aws azure bucket bugbounty fuzzer google-cloud security-tools

Last synced: 17 Oct 2025

https://github.com/belane/CloudHunter

AWS, Azure, Alibaba and Google bucket scanner

alibaba aws azure bucket bugbounty fuzzer google-cloud security-tools

Last synced: 06 Apr 2025

https://github.com/MichaelStott/CRLF-Injection-Scanner

Command line tool for testing CRLF injection on a list of domains.

bugbounty cli crlf fuzzer fuzzing security-vulnerability

Last synced: 13 Mar 2025

https://github.com/0xricksanchez/fisy-fuzz

This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April.

filesystem freebsd fuzzer fuzzing kernel kernel-panic kernels netbsd openbsd panic security-tools

Last synced: 28 Oct 2025

https://github.com/tlspuffin/tlspuffin

A Dolev-Yao-model-guided fuzzer for TLS

fuzzer fuzzing symbolic tls tls12 tls13

Last synced: 27 Sep 2025

https://github.com/FuzzingLabs/cairo-fuzzer

Cairo/Starknet smart contract fuzzer

cairo cairo-lang fuzzer fuzzing starknet

Last synced: 07 May 2025

https://github.com/dobin/ffw

A fuzzing framework for network servers

fuzzer network server

Last synced: 15 Jul 2025

https://github.com/Teebytes/TnT-Fuzzer

OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.

fuzzer fuzzing json-api openapi pentesting python security swagger

Last synced: 10 May 2025

https://github.com/softsec-kaist/imf

Inferred Model-based Fuzzer

fuzzer kernel-fuzzing macos

Last synced: 10 Sep 2025

https://github.com/oxagast/ansvif

A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.

exploit fuzz-testing fuzzer fuzzing pentesting quality-control vulnerability

Last synced: 19 Sep 2025

https://github.com/tiagorangel1/bunbuster

Ridiculously fast web & TCP fuzzer designed for brute-forcing directories, subdomains, and files on web servers.

bun fuzzer web-fuzzer

Last synced: 06 Apr 2025

https://github.com/softsec-kaist/ntfuzz

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

b2r2 binary-analysis fsharp fuzzer fuzzing kernel-fuzzer windows-kernel

Last synced: 11 Apr 2025

https://github.com/TNO-S3/WuppieFuzz

A coverage-guided REST API fuzzer developed on top of LibAFL

api-fuzzer fuzzer fuzzing openapi rest-api-test

Last synced: 18 Oct 2025

https://github.com/trailofbits/ruzzy

A coverage-guided fuzzer for pure Ruby code and Ruby C extensions

fuzzer fuzzing libfuzzer ruby ruby-extension ruby-gem

Last synced: 07 Apr 2025

https://github.com/Recon-Fuzz/chimera

Smart Contract Property-Based Testing Framework

echidna foundry fuzzer halmos medusa smart-contracts

Last synced: 26 Oct 2025

https://github.com/doyensec/ajpfuzzer

A command-line fuzzer for the Apache JServ Protocol (ajp13)

ajp ajp13 fuzzer security

Last synced: 02 Jul 2025

https://github.com/curl/curl-fuzzer

Quality assurance testing for the curl project

curl fuzzer oss-fuzz testcase

Last synced: 05 Apr 2025

https://github.com/vanhauser-thc/afl-patches

Patches to afl to fix bugs or add enhancements

afl afl-fuzz afl-fuzzer fuzzer fuzzing

Last synced: 27 Sep 2025