fuzzer

There are 58 repositories under fuzzer topic.

• ffuf / ffuf

  Fast web fuzzer written in Go

  fuzzerinfosecpentestingweb
  Language:Go 11932

• maurosoria / dirsearch

  Web path scanner

  fuzzerfuzzingpythonsecuritydirsearchhackingpentestingpenetration-testingbug-bountyappsecwordlisthacking-toolinfosecbrutescannerbugbountyenumerationpentest-toolred-teamingredteam
  Language:Python 11618

• TheKingOfDuck / fuzzDicts

  Web Pentesting Fuzz 字典,一个就够了。

  directoryfuzz-testingfuzzerfuzzingparamterpasswordpentestingusernamewfuzz
  Language:Python 7262

• google / syzkaller

  syzkaller is an unsupervised coverage-guided kernel fuzzer

  fuzz-testingfuzzerfuzzingkernellinuxsecuritysecurity-toolssecurity-vulnerabilitytesting
  Language:Go 5227
• AFLplusplus

  AFLplusplus / AFLplusplus

  The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

  aflafl-fuzzafl-fuzzerfuzzingfuzzerfuzz-testinginstrumentationqemuunicorn-emulatorfuzzer-aflafl-compilerafl-gccunicorn-modesecuritytesting
  Language:C 4856
• echidna

  crytic / echidna

  Ethereum smart contract fuzzer

  ethereumevmfuzzersecuritysmart-contractssoliditytesting
  Language:Solidity 2653

• antonio-morales / Fuzzing101

  An step by step fuzzing tutorial. A GitHub Security Lab initiative

  aflafl-fuzzbug-huntingbugbountyeducationfuzz-testingfuzzerfuzzillifuzzinghackingsecuritytestingvulnerabilities
  2383

• 1N3 / BlackWidow

  A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

  activeapplicationautomatedbugbountycsrffuzzerlfiosintowasppassivepythonrcerfiscanscannerspidersqlivulnerabilitywebxss
  Language:Python 1485
• wtf

  0vercl0k / wtf

  wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

  bochsbochscpucode-coveragefuzz-testingfuzzerfuzzingkvm-apisecuritysnapshot-fuzzertestingwinhv
  Language:C++ 1417

• m4n3dw0lf / pythem

  pentest framework

  pentestsnifferbrute-forceman-in-the-middlescannerxssproxyspoofdenial-of-serviceexploitfuzzernetworkpacket-analyserpacket-parsingpacket-processingpacket-generatorphishingsecurity-audithackingdocker
  Language:Python 1194
• cats

  Endava / cats

  CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

  apifuzzerjavaopenapirest-apirest-fuzzerswaggertesting
  Language:Java 1114
• jazzer

  CodeIntelligenceTesting / jazzer

  Coverage-guided, in-process fuzzing for the JVM

  fuzzingjavafuzzerjvmsecuritykotlinclojurejni
  Language:Java 985

• wireghoul / dotdotpwn

  DotDotPwn - The Directory Traversal Fuzzer

  fuzzerpenetration-testingperlsecuritytraversal
  Language:Perl 957

• AngoraFuzzer / Angora

  Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

  fuzzingsecurityfuzzeraflsymbolic-executiontaint-analysisdata-flow-analysis
  Language:C++ 918
• prjxray

  f4pga / prjxray

  Documenting the Xilinx 7-series bit-stream format.

  artixartix7bitstreamfpgafuzzerkintex7symbiflowtoolchaintoolsvivadoxilinxxilinx-fpga
  Language:Python 752

• Fuzzapi / fuzzapi

  Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

  fuzzerapisecurityautomationrailsrubysecurity-vulnerability
  Language:Ruby 629

• MozillaSecurity / funfuzz

  A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.

  javascript-fuzzingfuzzerjsfunfuzzspidermonkey-engine
  Language:Python 628

• fuzzitdev / jsfuzz

  coverage guided fuzz testing for javascript

  fuzz-testingfuzzerfuzzingjavascripttesting
  Language:TypeScript 600

• hfiref0x / NtCall64

  Windows NT x64 syscall fuzzer

  brute-force-attackscfuzzerntoswin64
  Language:C 577

• tlsfuzzer / tlsfuzzer

  SSL and TLS protocol test suite and fuzzer

  automationdrownfuzzerprotocol-testerprotocol-verifierrfc-compliancerobotsecurity-auditsecurity-vulnerabilitysslstandard-conformitytest-automationtest-frameworktest-suitetesting-toolstlstls12tls13tlslitetlslite-ng
  Language:Python 549

• liamg / scout

  🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs

  fuzzerurlurl-fuzzersecuritypentestinghackthebox
  Language:Go 532

• matusf / openapi-fuzzer

  Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!

  rustfuzzeropenapifuzzing
  Language:Rust 523

• MozillaSecurity / dharma

  Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.

  context-freefuzzerfuzzinggenerationgrammarpythonrandom
  Language:Python 476

• WebFuzzing / EvoMaster

  The first open-source AI-driven tool for automatically generating system-level test cases (also known as fuzzing) for web/enterprise applications. Currently targeting whitebox and blackbox testing of Web APIs, like REST, GraphQL and RPC (e.g., gRPC and Thrift).

  testingevolutionary-algorithmsrestjavakotlintest-case-generationapi-restapi-testingfuzzingfuzzergraphqlgrpcrpc-apisearch-based-software-testingthrift
  Language:Kotlin 458

• RedTeamPentesting / monsoon

  Fast HTTP enumerator

  enumeratorfastfuzzfuzzergohttpsecurity
  Language:Go 452

• rust-fuzz / honggfuzz-rs

  Fuzz your Rust code with Google-developed Honggfuzz !

  cratesfuzzfuzz-testingfuzzerfuzzinghonggfuzzrustrust-fuzzsanitizersecuritysecurity-testingsecurity-tools
  Language:Rust 442

• c0dejump / HawkScan

  Security Tool for Reconnaissance and Information Gathering on a website. (python 3.x)

  hawkscanreconnaissancewebinformation-gatheringfuzzerbugbounty
  Language:Python 437

• loiclec / fuzzcheck-rs

  Modular, structure-aware, and feedback-driven fuzzing engine for Rust functions

  rustfuzzingproperty-based-testingfuzzercoverage-guided-fuzzingtestinggrammar-fuzzer
  Language:Rust 428

• KissPeter / APIFuzzer

  Fuzz test your application using your OpenAPI or Swagger API definition without coding

  api-blueprintswaggerpython3fuzzopenapifuzzer
  Language:Python 412

• gokulapap / Reconator

  Automated Recon for Pentesting & Bug Bounty

  reconautomationpythonscannerwebscannertelebot-notificationfuzzerbugbountyreconator
  Language:Python 409

• rc0r / afl-utils

  Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

  fuzzingsecurityaflfuzzerpython-3crash-reportingtriageautomationjob-management
  Language:Python 409

• uds-se / FormatFuzzer

  FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs.

  binaryfuzzerfuzzinginputsparsingtesting
  Language:Python 394

• Brum3ns / firefly

  Black box fuzzer for web applications

  black-box-testingblackboxbugbountyfuzzfuzzerfuzzingpenetration-testingpentestingsecurity-toolsweb-security
  Language:Go 384

• brandonprry / gray_hat_csharp_code

  This repository contains full code examples from the book Gray Hat C#

  arachniautomationblueteamc-sharpclamavcuckoo-sandboxdotnetfuzzermetasploitmononessusnexposeopenvaspayloadpentestingredteamsecuritysql-injectionsqlmapxamarin
  Language:C# 379

• mseclab / PyJFuzz

  PyJFuzz - Python JSON Fuzzer

  crashfuzzerfuzzingjsonjson-apijson-schemajson-serializationprocess-crashes
  Language:Python 375

• Metalnem / sharpfuzz

  AFL-based fuzz testing for .NET

  fuzzingtestingfuzz-testingfuzzeraflafl-fuzzlibfuzzer
  Language:C# 359