There are 44 repositories under fuzzer topic.
Web path scanner
Web Pentesting Fuzz 字典,一个就够了。
The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
An step by step fuzzing tutorial. A GitHub Security Lab initiative
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows.
CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.
Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
Coverage-guided, in-process fuzzing for the JVM
A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.
Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.
🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs
Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!
Security Tool for Reconnaissance and Information Gathering on a website. (python 3.x)
Modular, structure-aware, and feedback-driven fuzzing engine for Rust functions
Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization
Fuzz your Rust code with Google-developed Honggfuzz !
This repository contains full code examples from the book Gray Hat C#
FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs.
The first open-source AI-driven tool for automatically generating system-level test cases (also known as fuzzing) for web/enterprise applications. Currently targeting whitebox and blackbox testing of Web APIs, like REST and GraphQL.