fuzz-testing - 技术专题

OSS-Fuzz - continuous fuzzing for open source software.

Monkey testing library for web apps and Node.js

You Know, For WEB Fuzzing !

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

syzkaller is an unsupervised coverage-guided kernel fuzzer

An step by step fuzzing tutorial. A GitHub Security Lab initiative

Recent Fuzzing Paper

Command line helpers for fuzzing

🐇 Fuzzing Rust code with American Fuzzy Lop

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

一个用于前端加密Fuzz的Burp Suite插件

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

A random SQL query generator

coverage guided fuzz testing for javascript

A curated list of awesome directed fuzzing research papers

ClusterFuzzLite - Simple continuous fuzzing that runs in CI.

Fuzz your Rust code with Google-developed Honggfuzz !

AFL-based fuzz testing for .NET

Fuzz Introspector -- introspect, extend and optimise fuzzers