corbfuzz

Security auditor

Fuzz testing tool to check browser security policies and detect vulnerabilities in web applications

Code for ASE'21 Paper "CorbFuzz: Checking Browser Security Policies with Fuzzing"

GitHub

3 stars
4 watching
2 forks
Language: C
last commit: about 3 years ago
Linked from 1 awesome list

browser-securityconcolic-executionfuzzing

Backlinks from these awesome lists:

Related projects:

Repository Description Stars
sefcom/witcher A framework for fuzzing web applications to detect vulnerabilities like command and SQL injection 77
google/fuzzbench Automated testing of software components to identify vulnerabilities and weaknesses 1,108
andresriancho/websocket-fuzzer Automates the process of sending WebSocket messages to test application vulnerabilities 144
rootup/bfuzz Automates browser testing with generated input payloads to identify vulnerabilities 309
stephenfewer/grinder Automates fuzz testing of web browsers and manages crashes to help identify security vulnerabilities 415
sycuricon/morfuzz A fuzzing framework for detecting functional bugs in RISC-V processors 23
google/oss-fuzz-vulns Records disclosed OSS-Fuzz vulnerabilities and their impact on versions and commits 133
jiangsir404/xss-sql-fuzz Automates fuzzing of XSS and SQL injection vulnerabilities in web applications using Burp Suite extensions. 60
google/fuzzer-test-suite A set of tests designed to challenge and identify bugs in fuzzing engines used by software developers. 1,431
tylerwince/flake8-bandit Automated security testing tool 111
rust-fuzz/afl.rs A tool for finding security and stability issues in Rust code by testing it with pseudo-random data. 1,651
prompt-security/ps-fuzz An interactive tool that tests and hardens the security of system prompts used in GenAI applications against various attacks. 401
jidicula/go-fuzz-action An Automated testing workflow for Go code using built-in fuzz testing features 15
google/atheris A tool that uses fuzz testing to identify bugs in software by randomly generating input data 1,399
wogscpar/szzunleashed An implementation of an algorithm to identify bug-introducing commits in software projects 110