Fuzzing101

Vulnerability hunter

A step-by-step guide to learning fuzzing techniques for finding vulnerabilities in software projects

An step by step fuzzing tutorial. A GitHub Security Lab initiative

GitHub

3k stars
56 watching
340 forks
last commit: 6 months ago
Linked from 1 awesome list

aflafl-fuzzbug-huntingbugbountyeducationfuzz-testingfuzzerfuzzillifuzzinghackingsecuritytestingvulnerabilities

Backlinks from these awesome lists:

Related projects:

Repository Description Stars
google/oss-fuzz An automated testing framework that uses random data to find errors in software 10,548
google/fuzzing A hub for learning and exploring fuzzing techniques to test software for vulnerabilities 3,513
google/honggfuzz A high-performance fuzzer for detecting security vulnerabilities in software 3,079
wcventure/fuzzingpaper A collection of recent papers on fuzz testing and related topics. 2,467
fuzzdb-project/fuzzdb A comprehensive toolset for identifying and exploiting application vulnerabilities through dynamic testing 8,242
mykter/afl-training A comprehensive workshop and training project on fuzzing with AFL (American Fuzzy Lop) for discovering vulnerabilities in popular software projects. 1,227
xmendez/wfuzz A tool to automatically generate and test web application inputs for security vulnerabilities 5,967
google/fuzzer-test-suite A set of tests designed to challenge and identify bugs in fuzzing engines used by software developers. 1,431
andresriancho/websocket-fuzzer Automates the process of sending WebSocket messages to test application vulnerabilities 144
status-im/nim-drchaos A fuzzing framework for testing C/C++/Obj-C targets by generating random inputs to induce crashes or verify invariants. 68
dvyukov/go-fuzz A tool for generating and testing random inputs to ensure software reliability 4,780
enterprisequalitycoding/fizzbuzzenterpriseedition An enterprise-grade implementation of the FizzBuzz game 21,555
ffuf/ffuf Automated web application vulnerability scanner written in Go. 12,704
google/fuzzbench Automated testing of software components to identify vulnerabilities and weaknesses 1,108
jtpereyda/boofuzz A tool for generating and testing network protocol inputs to identify vulnerabilities 2,041