fuzzing

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

DOM fuzzer

Automated testing to find logic and performance bugs in database systems

RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集，可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith

A toolset for reverse engineering and fuzzing Protobuf-based apps

Asset inventory of over 800 public bug bounty programs.

Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential jailbreaks in their LLM APIs.

LLM powered fuzzing via OSS-Fuzz.

Ethereum smart contract fuzzer

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

An analysis tool for Python that blurs the line between testing and type systems.

Project page for "The Fuzzing Book"

Coverage-guided, in-process fuzzing for the JVM

The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application for high-performance fuzzing on Intel/AMD processors.

FuzzBench - Fuzzer benchmarking as a service.

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embedded applications.

Blazing Fast Bytecode-Level Hybrid Fuzzer for Smart Contracts

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

Infosec Wordlists and more.

A friendly car security exploration tool for the CAN bus

Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis

FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares

Rapid is a modern Go property-based testing library

A unit test-like interface for fuzzing and symbolic execution

Netzob: Protocol Reverse Engineering, Modeling and Fuzzing

A fuzzer for full VM kernel/driver targets