Awesome GitHub RepositoriesFuzzing Frameworks

Syzkaller is an unsupervised, coverage-guided kernel fuzzer that automatically generates and mutates system call sequences to find bugs in operating system kernels. It operates without human intervention, using a closed feedback loop of input generation, execution, crash detection, and corpus refinement to continuously explore kernel code paths. The fuzzer distinguishes itself by supporting multiple operating system kernels, including Linux, FreeBSD, and Windows, through per-platform syscall harnesses that abstract system call interfaces behind a common driver. It uses declarative description

go-fuzz es una herramienta de pruebas aleatorias guiada por cobertura para identificar fallos y errores de lógica en código Go. Consiste en un fuzzer que evoluciona entradas aleatorias basadas en rutas de ejecución de código, una herramienta de instrumentación que produce binarios para rastrear la cobertura y un gestor de corpus semilla. La herramienta utiliza instrumentación binaria en tiempo de compilación para monitorear la cobertura de ramas y emplea un bucle de mutación impulsado por retroalimentación para priorizar las entradas que alcanzan nuevas secciones del código base. Incluye capacidades para pruebas diferenciales comparativas para identificar errores de lógica ejecutando diferentes implementaciones de la misma lógica con la misma entrada aleatoria. El sistema maneja la generación de entradas aleatorias para realizar pruebas de estrés en parsers de formatos complejos y proporciona utilidades para la minimización y deduplicación de corpus semilla. Puede exportar archivos instrumentados para su ejecución dentro de un motor de fuzzing en Linux.

This is a public archive of vulnerability findings, proof-of-concept code, and technical reports detailing security flaws discovered in third-party software. It functions as a coordinated vulnerability disclosure platform, enabling private reporting to vendors and structured publication of advisories after a fix is released or a 90-day deadline passes. The repository provides modular security analysis tooling—standalone scripts and binaries each targeting a specific bug class for automated detection—alongside a cross-platform fuzzing framework that runs tests across multiple operating systems

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

a general-purpose fuzzer

Coverage-guided, in-process fuzzing for the JVM

Linux kernel source tree

RetroWrite -- Retrofitting compiler passes through binary rewriting

AFL/QEMU fuzzing with full-system emulation.

Directed Greybox Fuzzing with AFL

🌪️ Application fuzzer

ANTLR v4 grammar-based test generator

Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.

Janus: a state-of-the-art file system fuzzer on Linux

Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM

SOSP'25 Automatic checker synthesis for system-level static analysis

VirtFuzz is a Linux Kernel Fuzzer that uses VirtIO to provide inputs into the kernels subsystem. It is built with LibAFL.

Bug hunting through fuzzer/*-sanitizer/etc...

Sloth 🦥 is a coverage guided fuzzing framework for fuzzing Android Native libraries that makes use of libFuzzer and QEMU user-mode emulation

Agamotto: Accelerating Kernel Driver Fuzzing with Lightweight Virtual Machine Checkpoints