Fast web fuzzer written in Go

Web path scanner

You Know, For WEB Fuzzing ! 日站用的字典。

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

syzkaller is an unsupervised coverage-guided kernel fuzzer

An step by step fuzzing tutorial. A GitHub Security Lab initiative

Ethereum smart contract fuzzer

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

pentest framework

Coverage-guided, in-process fuzzing for the JVM

DotDotPwn - The Directory Traversal Fuzzer

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

Documenting the Xilinx 7-series bit-stream format.

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.

The first open-source AI-driven tool for automatically generating system-level test cases (also known as fuzzing) for web/enterprise applications. Currently targeting whitebox and blackbox testing of Web APIs, like REST, GraphQL and RPC (e.g., gRPC and Thrift).

Windows NT x64 syscall fuzzer

coverage guided fuzz testing for javascript