Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

Fuzzing/Fuzz testing

Fuzzing or fuzz testing is an automated software black box testing technique that evaluates the program’s reaction to providing invalid, unexpected, or random data as inputs to a computer program.

https://github.com/phayes/sidefuzz

Fuzzer to automatically find side-channel (timing) vulnerabilities

constant-time cryptography dudect fuzzing rust side-channel wasm

Last synced: 03 Nov 2024

https://github.com/Teebytes/TnT-Fuzzer

OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.

fuzzer fuzzing json-api openapi pentesting python security swagger

Last synced: 03 Aug 2024

https://github.com/thepudds/fzgen

Auto-gen Go fuzzing wrappers from normal code. Finds buggy call sequences, including data races & deadlocks. Supports rich signature types.

fuzzing go testing

Last synced: 27 Oct 2024

https://github.com/oxagast/ansvif

A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.

exploit fuzz-testing fuzzer fuzzing pentesting quality-control vulnerability

Last synced: 27 Oct 2024

https://github.com/siemens/fluffi

FLUFFI (Fully Localized Utility For Fuzzing Instantaneously) - A distributed evolutionary binary fuzzer for pentesters

fuzzing pentesting security

Last synced: 04 Aug 2024

https://github.com/kostas-pa/LFITester

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

bugbounty crawler cybersecurity enumeration exploitation fuzzing hacking lfi lfi-detection lfi-exploitation lfi-vulnerability penetration-testing penetration-testing-tools pentest-tool pentesting python web-hacking webhacking

Last synced: 04 Aug 2024

https://github.com/ymherklotz/verismith

Verilog Fuzzer to test the major simulators and sythesisers by generating random, valid Verilog.

fuzzing verilog

Last synced: 01 Nov 2024

https://github.com/zac-hd/hypothesmith

Hypothesis strategies for generating Python programs, something like CSmith

fuzzing hypothesis python

Last synced: 31 Oct 2024

https://github.com/riza/medusa

Fastest recursive HTTP fuzzer, like a Ferrari.

directory-finder fuzzing

Last synced: 03 Aug 2024

https://github.com/zjuchenyuan/dockerized_fuzzing

Run fuzzing experiments in Docker

fuzzing

Last synced: 04 Aug 2024

https://github.com/Agnoctopus/Tartiflette

Snapshot fuzzing with KVM and LibAFL

fuzzing kvm libafl virtualization

Last synced: 04 Aug 2024

https://github.com/thehlopster/hfuzz

Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templates, web-scanners, seclist, bo0m, and more.

bugbounty fuzz fuzzing hacking pentesting security web-fuzzing wordlist

Last synced: 02 Aug 2024

https://github.com/vanhauser-thc/afl-patches

Patches to afl to fix bugs or add enhancements

afl afl-fuzz afl-fuzzer fuzzer fuzzing

Last synced: 26 Sep 2024

https://github.com/TCA-ISCAS/Cooper

A tool for effective testing the binding layer of scripting languages

fuzzing

Last synced: 01 Aug 2024

https://github.com/jonathansalwan/ttexplore

TTexplore is a library that performs path exploration on binary code using symbolic execution

fuzzing symbolic-execution

Last synced: 29 Oct 2024

https://github.com/atrosinenko/kbdysch

A collection of user-space Linux kernel specific guided fuzzers based on LKL

afl filesystem fuzzing linux-kernel lkl

Last synced: 03 Aug 2024

https://github.com/amossys/fragscapy

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

evasion firewall fuzzing ids network

Last synced: 03 Aug 2024

https://github.com/AMOSSYS/Fragscapy

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

evasion firewall fuzzing ids network

Last synced: 02 Aug 2024

https://github.com/wireghoul/doona

Network based protocol fuzzer

exploit fuzzer fuzzing perl security

Last synced: 28 Oct 2024

https://github.com/langston-barrett/tree-crasher

Easy-to-use grammar-based black-box fuzzer. Has found dozens of bugs in important targets like Clang, Deno, and rustc.

black-box-testing fuzzer fuzzing grammar-based grammar-based-fuzzing

Last synced: 30 Oct 2024

https://github.com/Zac-HD/hypofuzz

Adaptive fuzzing of Hypothesis tests

fuzzing hypothesis testing

Last synced: 03 Aug 2024

https://github.com/zac-hd/hypofuzz

Adaptive fuzzing of Hypothesis tests

fuzzing hypothesis testing

Last synced: 01 Nov 2024

https://github.com/sec-tools/litefuzz

A multi-platform fuzzer for poking at userland binaries, network clients and servers

exploit fuzzing fuzzing-framework security vulnerability

Last synced: 02 Aug 2024

https://github.com/intel/ccc-linux-guest-hardening

Linux Security Hardening for Confidential Compute

fuzzing security security-tools

Last synced: 02 Aug 2024

https://github.com/kmarkela/duffman

Fuzzer and Lightweight CLI Client for Postman Collections

api-pentest api-testing fuzz-testing fuzzer fuzzing postman postman-collection

Last synced: 31 Oct 2024

https://github.com/olipratt/swagger-conformance

Python based tool for testing whether your API conforms to its Swagger schema

fuzzing open-api property-based-testing swagger swagger-schema

Last synced: 13 Oct 2024

https://github.com/Josue87/roboxtractor

Extract endpoints marked as disallow in robots files to generate wordlists.

bug-bounty bugbounty enumeration fuzzing hacking wordlist

Last synced: 04 Aug 2024

https://github.com/htrgouvea/nozaki

HTTP fuzzer engine security oriented

api bugbounty fuzzer fuzzing graphql http nozaki perl research rest restfull security

Last synced: 04 Aug 2024

https://github.com/unibuc-cs/river

Fuzz testing framework for binary programs using AI

fuzzing

Last synced: 03 Aug 2024

https://github.com/christhecoolhut/easy-pickings

Automatic function exporting and linking for fuzzing cross-architecture binaries.

fuzzing

Last synced: 16 Oct 2024

https://github.com/snorez/srcinv

source code audit tool

audit fuzzing kernel linux open-source qa

Last synced: 04 Aug 2024

https://github.com/qlyoung/lagopus

Distributed fuzzing platform

cluster fuzzing kubernetes security

Last synced: 28 Oct 2024

https://github.com/supercilex/ftzz

File Tree Fuzzer creates a pseudo-random directory hierarchy filled with some number of files.

cli directory-tree files fuzzing rust

Last synced: 30 Oct 2024

https://github.com/cytopia/fuzza

Customizable TCP fuzzing tool to test for remote buffer overflows.

buffer-overflow buffer-overflow-attack cytopia-sec fuzzer fuzzers fuzzing

Last synced: 22 Oct 2024

https://github.com/seelengrab/supposition.jl

A Julia implementation of choice sequence based PBT, inspired by Hypothesis

fuzzing julia julia-language julialang pbt property-based-testing testing

Last synced: 12 Oct 2024

https://github.com/r0x4r/scvault

Custom scripts for directory fuzzing, subdomain enumeration, and more.

automation bash-script bug-bounty bug-bounty-hunters bugbounty directory-busting ffuf fuzzing infosec interlace

Last synced: 15 Oct 2024

https://github.com/hahwul/ras-fuzzer

RAS(RAndom Subdomain) Fuzzer

bugbounty fuzzer fuzzing hacking security subdomain tools

Last synced: 02 Nov 2024

https://github.com/R0X4R/scvault

Custom scripts for directory fuzzing, subdomain enumeration, and more.

automation bash-script bug-bounty bug-bounty-hunters bugbounty directory-busting ffuf fuzzing infosec interlace

Last synced: 04 Aug 2024

https://github.com/planetis-m/libfuzzer

Thin interface for libFuzzer, an in-process, coverage-guided, evolutionary fuzzing engine.

fuzzing hacking security unit-testing

Last synced: 03 Aug 2024

https://github.com/IncludeSecurity/RTSPhuzz

RTSPhuzz - An RTSP Fuzzer written using the Boofuzz framework

0day fuzzer fuzzing mozilla-open-source research-tool rtsp rtsp-server sponsored

Last synced: 04 Aug 2024

https://github.com/0xSobky/Regaxor

A regular expression fuzzer.

fuzzing regex regexp regular-expression tools

Last synced: 26 Sep 2024

https://github.com/squeek502/zig-std-lib-fuzzing

A set of fuzzers for fuzzing various parts of the Zig standard library

fuzz-testing fuzzing zig

Last synced: 14 Oct 2024

https://github.com/p0dalirius/microsoft-rpc-fuzzing-tools

This repository contains a list of python scripts to work with Microsoft RPC for research purposes.

calls fuzzing microsoft protocols remote research rpc

Last synced: 29 Oct 2024

https://github.com/jaybosamiya/fuzzing-numpy

:snake: Experiments in trying to find 0-days in numpy

0day experimental fuzzing numpy security

Last synced: 02 Nov 2024

https://github.com/dubzzz/fuzz-rest-api

Derive property based testing fast-check into a fuzzer for REST APIs

fast-check fuzzing property-based-testing quickcheck rest-api

Last synced: 28 Oct 2024

https://github.com/15r10nk/pysource-codegen

generate random python code to test linter/formatter/and other tools

fuzzing python testing

Last synced: 31 Oct 2024

https://github.com/ligurio/luzer

A coverage-guided, native Lua fuzzing engine.

fuzzing testing

Last synced: 30 Oct 2024

https://github.com/fornwall/advent-of-code

🎄Advent of Code with Rust 🦀

advent-of-code fuzzing pyo3 rust webassembly

Last synced: 27 Oct 2024

https://github.com/jxy-s/vfdynf

Application Verifier Dynamic Fault Injection

application-verifier debugging-tool fuzzing verifier windows

Last synced: 27 Oct 2024

https://github.com/xsscx/xnuimagefuzzer

XNU Image Fuzzer - iOS App for Fuzzing Images with Objective-C Code covering 12 CGCreateBitmap & CGColorSpace Functions working with Raw Data and String Injection.

crash debugging exploit file fuzz fuzzing graphics image imagefuzzer interposing ios iosonmac macos objective-c research security utt xcode xnu

Last synced: 12 Oct 2024

https://github.com/vanhauser-thc/libfuzzer-cov

Get actually nice HTML coverage overview on libfuzzer runs

coverage fuzzing libfuzzer

Last synced: 28 Oct 2024

https://github.com/RootUp/PHDays9

My fuzzing workshop from PHDays9

afl afl-fuzz fuzzing phdays workshop workshop-materials

Last synced: 01 Nov 2024

https://github.com/cestef/rwalk

A blazingly fast web directory scanner written in Rust

fuzzing rust web

Last synced: 31 Oct 2024

https://github.com/spolu/gym_fuzz1ng

OpenAI Gym environment for binary fuzzing based on afl

afl deep-learning fuzzing openai-gym

Last synced: 15 Oct 2024

https://github.com/vanhauser-thc/peachpro

Dockerfile for peach pro with everything set up as needed

fuzz fuzzer fuzzing peach peach-fuzzer

Last synced: 13 Oct 2024

https://github.com/nscuro/bradamsa-ng

Burp Suite extension for Radamsa-powered fuzzing with Intruder

bradamsa burp burp-extensions burpsuite fuzzing intruder radamsa windows-subsystem-for-linux wsl

Last synced: 04 Aug 2024

https://github.com/geeknik/cve-fuzzing-poc

PoCs discovered through fuzzing which resulted in a CVE assignment.

cve fuzzing infosec poc security testcase

Last synced: 23 Oct 2024

https://github.com/dogancanbakir/pirebok

pîrebok (from Kurdish "witch") - a guided adversarial fuzzer

adversarial cybersecurity fuzzer fuzzing hacktoberfest ml sql

Last synced: 28 Oct 2024

https://github.com/posener/fuzzing

Easy fuzzing with go-fuzz

dvyukov fuzz fuzzing go go-fuzz golang testing

Last synced: 23 Oct 2024

https://github.com/randombit/crypto-corpus

Corpus of crypto formats

cryptography fuzzing

Last synced: 15 Oct 2024

https://github.com/hupe1980/scan4log4shell

Scanner to send specially crafted requests and catch callbacks of systems that are impacted by log4j log4shell vulnerability and to detect vulnerable log4j versions on your local file-system

auth blue-team cve-2021-44228 cve-2021-45046 cve-2021-45105 dns form-detection fuzzing log4j log4shell rce red-team scanner vulnerability waf-bypass

Last synced: 17 Oct 2024

https://github.com/user1342/AutoCorpus

AutoCorpus is a tool backed by a large language model (LLM) for automatically generating corpus files for fuzzing.

corpus-generator dynamic-analysis fuzzing large-language-models llm vulnerability-research

Last synced: 26 Sep 2024

https://github.com/p0dalirius/http-fuzzing-scripts

A collection of http fuzzing python scripts to fuzz HTTP servers for bugs.

fuzzing http script

Last synced: 29 Oct 2024

https://github.com/squeek502/zig-fuzzing-example

An example of fuzzing Zig code with AFL++

example-project fuzz-testing fuzzing zig

Last synced: 14 Oct 2024

https://github.com/vogtinator/usbredir2phys

Turns virtual usbredir connections into physical ones

fuzzing linux usb usb-devices usb-gadget

Last synced: 11 Oct 2024

https://github.com/ashvardanian/libsee

Link to this library and it will log all the LibC functions you are calling and how much time you are spending in them!

assembly benchmark benchmarking fuzzing glibc ld-preload ld-preload-hack libc

Last synced: 28 Oct 2024

https://github.com/orbitcowboy/afl_cppcheck

A script to start fuzzing of cppcheck with american fuzzy lop

afl-fuzz cplusplus cppcheck fuzzing

Last synced: 01 Nov 2024

https://github.com/agroce/muttfuzz

A tool for meta-fuzzing using program mutants

fuzzing fuzzing-framework meta-fuzzing mutation-testing

Last synced: 27 Oct 2024

https://github.com/troglobit/libc-chaos

Emit random errors when calling libc functions to emulate an unstable underlying system

fault-injection fuzzing glibc

Last synced: 27 Oct 2024

https://github.com/shafiuzzaman-md/Rare-Path-Guided-Fuzzing

Rare-Path Guided Fuzzing

fuzzer fuzzing testing

Last synced: 23 Oct 2024

https://github.com/tree-sitter/afl-tree-sitter

AFL test harness for tree-sitter runtime and parsers

afl fuzzing tree-sitter

Last synced: 07 Oct 2024

https://github.com/wirzka/wordlists

General repository where I put my/others wordlists

ctf dirb dirbuster fuzzing gobuster metasploit wfuzz wordlists

Last synced: 14 Oct 2024

https://github.com/vanhauser-thc/fuzzing-targets

Some fuzzing targets for testing

fuzz fuzz-testing fuzzing

Last synced: 13 Oct 2024

https://github.com/foospidy/fuzzcat

Rudimentary network protocol fuzzer using bash, netcat, and other tools.

application-security bash fuzzer fuzzing netcat network-security

Last synced: 03 Aug 2024

https://github.com/namuan/fuzzy-swagger

API fuzz testing generator using swagger document.

api fuzz-testing fuzzing openapi python swagger testing

Last synced: 18 Oct 2024

https://github.com/jrconlin/cookie_munger

A stupid idea to abuse the hell out of cookies, because who doesn't like fuzzy cookies?

cookies fuzzing python

Last synced: 01 Nov 2024

https://github.com/pthariensflame/salmagundi

A tool to rewrite data type definitions to rearrange in-memory layout.

fuzzing rust-language testing-tools

Last synced: 12 Oct 2024

https://github.com/graniet/gofuzz

A Request fuzzer written in Go

api fuzzer fuzzing hacking rest security

Last synced: 14 Oct 2024

Fuzzing/Fuzz testing Awesome Lists
Awesome-Hacking 84 Awesome-Fuzzing 173 awesome-api-security 199 Awesome-Vulnerability-Research 93 awesome-fuzzing 182 awesome-rtc-hacking 105 awesome-cryptocurrency-security 50 fucking-Awesome-Hacking 81 security-study-tutorial 237 awesome-embedded-fuzzing 174
Fuzzing/Fuzz testing Categories
Papers 186 Blogs 161 Advisories 116 Tools 100 Awesome Repositories 95 Other Useful Repositories 74 Resources 73 Malware 55 Pentest 51 Tutorials and Blogs 50 Fuzzing 45 Videos 30 Books 27 Other resources 20 Deliberately vulnerable APIs 18 Security conference 17 Open-source tools 17 Training, Workshops, Labs 13 Fuzzing, SecLists, Wordlists 13 Notable blog posts and articles 12