Google OSS-Fuzz
OSS-Fuzz provides continuous fuzz testing for open source software, effectively revealing programming errors with significant security implications, such as buffer overfl... OSS-Fuzz provides continuous fuzz testing for open source software, effectively revealing programming errors with significant security implications, such as buffer overflows. By leveraging advanced fuzzing techniques and scalable execution, it has successfully identified over 10,000 vulnerabilities across various programming languages, enhancing the security and stability of countless projects.
Top Google OSS-Fuzz Alternatives
Jazzer
Jazzer is an innovative coverage-guided fuzzer designed for the JVM platform, leveraging libFuzzer's advanced mutation capabilities. It offers a unique...
Sulley
Sulley is a sophisticated fuzzing framework designed for seamless automation and unattended operation. With robust data generation capabilities, it meticulously...
Honggfuzz
Honggfuzz is an advanced, security-focused software fuzzer that utilizes evolutionary, feedback-driven techniques based on code coverage. It operates efficiently in...
syzkaller
Syzkaller is an advanced unsupervised coverage-guided kernel fuzzer designed to enhance system security by identifying vulnerabilities across various operating systems,...
hevm
hevm is a specialized fuzz testing tool designed for the Ethereum Virtual Machine (EVM), facilitating symbolic execution, unit testing, and...
Tayt
Tayt serves as an advanced fuzzer for StarkNet smart contracts, allowing users to analyze contract behavior through rigorous testing. It...
go-fuzz
Go-fuzz is a sophisticated coverage-guided fuzzing tool designed for testing Go packages, particularly those handling complex text and binary inputs....
american fuzzy lop
This security-oriented fuzzer utilizes advanced compile-time instrumentation and genetic algorithms to identify novel test cases that expose new states in...
FuzzDB
FuzzDB serves as a crucial toolkit for enhancing application security through dynamic testing. It offers an extensive array of attack...
ToothPicker
ToothPicker is a specialized in-process fuzzer designed for iOS, targeting the Bluetooth daemon bluetoothd and various Bluetooth protocols. Built on...
Fuzzbuzz
Fuzzbuzz enhances the fuzz testing experience by seamlessly integrating into a developer's existing workflow. It automates the execution of fuzz...
Radamsa
Radamsa serves as an advanced test case generator designed for robustness testing, effectively evaluating how programs handle malformed or malicious...
Fuzzapi
Fuzzapi is an innovative tool designed for REST API penetration testing, leveraging the capabilities of the API_Fuzzer gem to enhance...
Boofuzz
Boofuzz is an advanced fuzzing framework that enhances the legacy of Sulley with improved installation, extensibility, and support for various...
Ffuf
Ffuf is a high-performance web fuzzing tool crafted in Go, designed for efficient vulnerability discovery. Users can execute fuzzing operations...
Company Information
- Company: Google
- Country: United States
Top Google OSS-Fuzz Features
- Continuous fuzzing for open source
- Identifies security vulnerabilities
- Detects stability bugs
- Supports multiple programming languages
- Scalable and distributed execution
- Integration with libFuzzer
- Integration with AFL++
- Integration with Honggfuzz
- Supports various architectures
- Provides detailed documentation
- Community-driven feedback mechanism
- Tracks over 10
- 000 vulnerabilities
- Supports both ClusterFuzz and ClusterFuzzLite
- Real-time error reporting
- Guided in-process fuzzing
- Enhances software security
- Open source community collaboration
- Focus on widely used projects
- Automates fuzz testing process
- Supports LLVM-compatible languages
