afl-training

Fuzzing tutorial

A comprehensive workshop and training project on fuzzing with AFL (American Fuzzy Lop) for discovering vulnerabilities in popular software projects.

Exercises to learn how to fuzz with American Fuzzy Lop

GitHub

1k stars
31 watching
196 forks
Language: C
last commit: about 2 years ago
aflfuzzingtrainingworkshop

Related projects:

Repository Description Stars
rust-fuzz/afl.rs A tool for finding security and stability issues in Rust code by testing it with pseudo-random data. 1,668
aflplusplus/libafl A framework for building custom fuzzers using Rust, allowing developers to extend and customize their fuzzing capabilities. 2,059
google/fuzzing A hub for learning and exploring fuzzing techniques to test software for vulnerabilities 3,545
quarkslab/android-fuzzing A toolkit for greybox fuzzing of Android applications using AFL++ Frida mode 109
fuzzing/mffa Automatically testing Android media software components for vulnerabilities by feeding malformed media files to them. 332
jtpereyda/boofuzz A tool for generating and testing network protocol inputs to identify vulnerabilities 2,057
google/fuzzbench Automated testing of software components to identify vulnerabilities and weaknesses 1,110
momalab/icsfuzz A tool used to test security vulnerabilities in industrial control systems by injecting random data into their application code. 26
status-im/nim-drchaos A fuzzing framework for testing C/C++/Obj-C targets by generating random inputs to induce crashes or verify invariants. 68
rootup/bfuzz Automates browser testing with generated input payloads to identify vulnerabilities 310
fuzzinglabs/cairo-fuzzer A tool for testing smart contract security by generating random inputs and executing them on a contract to identify vulnerabilities. 120
iromise/fans Fuzzing tool to identify vulnerabilities in Android native system services. 244
antojoseph/droid-ff A toolset for testing the security of Android applications by simulating various types of malformed input data 85
ameenmaali/qsfuzz A tool to help identify vulnerabilities in web applications by fuzzing query strings with custom rules. 297
stephenfewer/grinder Automates fuzz testing of web browsers and manages crashes to help identify security vulnerabilities 416