mschwager

RRFuzz

Fuzz anything with Program Environment Fuzzing

fuzzilli

A JavaScript Engine Fuzzer

impacket

Impacket is a collection of Python classes for working with network protocols.

uru-card

Arduino based firmware for FIDO2 Authenticator

fido20

Sample FIDO 2.0 BLE Authenticator

389-ds-base

The enterprise-class Open Source LDAP server for Linux

hermit

Hermit launches linux x86_64 programs in a special, hermetically isolated sandbox to control their execution. Hermit translates normal, nondeterministic behavior, into deterministic, repeatable behavior. This can be used for various applications, including replay-debugging, reproducible artifacts, chaos mode concurrency testing and bug analysis.

oidc

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

gvisor

Application Kernel for Containers

ruzzy

A coverage-guided fuzzer for pure Ruby code and Ruby C extensions

go-concurrency-bugs

Collected Concurrency Bugs in Our ASPLOS Paper

http-garden

Differential testing and fuzzing of HTTP servers and proxies

cryptofuzz

Fuzzing cryptographic libraries. Magic bug printer go brrrr.

1u.ms

rbndr

Simple DNS Rebinding Service

syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

fuzz-introspector

Fuzz Introspector -- introspect, extend and optimise fuzzers

oss-fuzz-gen

LLM powered fuzzing via OSS-Fuzz.

cwe_checker

cwe_checker finds vulnerable patterns in binary executables

BTIGhidra

Binary Type Inference Ghidra Plugin

collisions

Hash collisions and exploitations

sortcheck

Tool for detecting violations of ordering axioms in qsort/bsearch callbacks.

clusterfuzzlite

ClusterFuzzLite - Simple continuous fuzzing that runs in CI.

speedbump

TCP proxy for simulating variable, yet predictable network latency :globe_with_meridians::hourglass_flowing_sand:

toxiproxy

:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing

fuzztest

criticality_score

Gives criticality score for an open source project

go-containerregistry

Go library and CLIs for working with container registries

slsa

Supply-chain Levels for Software Artifacts

jazzer

Coverage-guided, in-process fuzzing for the JVM