Fuzzing101

Vulnerability hunter

A step-by-step guide to learning fuzzing techniques for finding vulnerabilities in software projects

An step by step fuzzing tutorial. A GitHub Security Lab initiative

GitHub

3k stars
56 watching
347 forks
last commit: over 2 years ago
Linked from 1 awesome list

aflafl-fuzzbug-huntingbugbountyeducationfuzz-testingfuzzerfuzzillifuzzinghackingsecuritytestingvulnerabilities

Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
google/oss-fuzzAn automated testing framework that uses random data to find errors in software10,671
google/fuzzingA hub for learning and exploring fuzzing techniques to test software for vulnerabilities3,545
google/honggfuzzA high-performance fuzzer for detecting security vulnerabilities in software3,093
wcventure/fuzzingpaperA curated collection of recent papers on fuzz testing techniques and tools.2,498
fuzzdb-project/fuzzdbA comprehensive toolset for identifying and exploiting application vulnerabilities through dynamic testing8,288
mykter/afl-trainingA comprehensive workshop and training project on fuzzing with AFL (American Fuzzy Lop) for discovering vulnerabilities in popular software projects.1,233
xmendez/wfuzzA tool to automatically generate and test web application inputs for security vulnerabilities5,978
google/fuzzer-test-suiteA set of tests designed to challenge and identify bugs in fuzzing engines used by software developers.1,437
andresriancho/websocket-fuzzerAutomates the process of sending WebSocket messages to test application vulnerabilities144
status-im/nim-drchaosA fuzzing framework for testing C/C++/Obj-C targets by generating random inputs to induce crashes or verify invariants.68
dvyukov/go-fuzzA tool for generating and testing random inputs to ensure software reliability4,790
enterprisequalitycoding/fizzbuzzenterpriseeditionAn enterprise-grade implementation of the FizzBuzz game21,775
ffuf/ffufAutomated web application vulnerability scanner written in Go.12,876
google/fuzzbenchAutomated testing of software components to identify vulnerabilities and weaknesses1,110
jtpereyda/boofuzzA tool for generating and testing network protocol inputs to identify vulnerabilities2,057