awesome-fuzzing

(2019)

(2019) - Actually, this document is a paper, but it contains more important and essential content than any other book

(2018)

(2007)

(2007)

, Youtube

, Black Hat Europe 2016

, NYU Talk 2018

, NDC Conferences 2018

AFL++

AFL++ is a superior fork to Google's AFL - more speed, more and better mutations, more and better instrumentation, custom module support, etc

Angora

Angora is a mutation-based coverage guided fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution

IvySyn is a fully-automated framework for discovering memory error vulnerabilities in Deep Learning (DL) frameworks

MINER

MINER is a REST API fuzzer that utilizes three data-driven designs working together to guide the sequence generation, improve the request generation quality, and capture the unique errors caused by incorrect parameter usage

RestTestGen

RestTestGen is a robust tool and framework designed for automated black-box testing of RESTful web APIs

GraphFuzz

GraphFuzz is an experimental framework for building structure-aware, library API fuzzers

Minerva

Minerva is a browser fuzzer augmented by API mod-ref relations, aiming to synthesize highly-relevant browser API invocations in each test case

FANS

FANS is a fuzzing tool for fuzzing Android native system services. It contains four components: interface collector, interface model extractor, dependency inferer, and fuzzer engine

DifuzzRTL

DifuzzRTL is a differential fuzz testing approach for CPU verification

MorFuzz

MorFuzz is a generic RISC-V processor fuzzing framework that can efficiently detect software triggerable functional bugs

SpecFuzz

SpecFuzz is a tool to enable fuzzing for Spectre vulnerabilities

Transynther

Transynther automatically generates and tests building blocks for Meltdown attacks with various faults and microcode assists

TEFuzz

TEFuzz is a tailored fuzzing-based framework to facilitate the detection and exploitation of template escape bugs

Witcher

Witcher is a web application fuzzer that utilizes mutational fuzzing to explore web applications and fault escalation to detect command and SQL injection vulnerabilities

CorbFuzz

CorbFuzz is a state-aware fuzzer for generating as much reponses from a web application as possible without need of setting up database, etc

Fluffy

Fluffy is a multi-transaction differential fuzzer for finding consensus bugs in Ethereum

LOKI

LOKI is a blockchain consensus protocol fuzzing framework that detects the consensus memory related and logic bugs

Squirrel

Squirrel is a fuzzer for database managment systems (DBMSs)