google/fuzzingArchived

Features

• Fuzzing Knowledge Bases - Provides a comprehensive collection of tutorials and research resources for finding software bugs through automated input mutation and coverage analysis.
• Coverage-Guided Fuzzing - Implements coverage-guided fuzzing mechanisms that use executed code paths to drive input mutations.
• Corpus Management - Details how to maintain and organize seed corpora to maximize the discovery of new code paths.
• Memory Safety Diagnostics - Guides the use of binary instrumentation to detect buffer overflows and uninitialized memory reads.
• Binary Instrumentation - Utilizes binary instrumentation to track memory safety and program flow in compiled executables without source code.
• Fuzz Target Compilation - Explains how to compile source code with the specific instrumentation required to create executable fuzz targets.
• Undefined Behavior Detection - Details the use of instrumentation to trap and identify operations that violate language specifications.
• Memory and Concurrency Error Detection - Combines instrumentation and mutated data to discover memory leaks, overflows, and other critical programming errors.
• Attack Surface Analysis - Provides guidance on finding high-risk entry points exposed to untrusted user input or network traffic.
• Binary-Only Fuzzing Frameworks - Offers frameworks for performing coverage-guided fuzzing on binaries using emulation or static rewriting.
• Emulation-Based Fuzzings - Provides technical guidance on performing coverage-guided fuzzing on compiled binaries without access to source code.
• Grammar-Aware Input Generations - Implements grammar-aware input generation to exercise structured parsers more effectively.
• Fuzzing Implementation Guides - Provides a technical reference for implementing structure-aware, hybrid, and continuous fuzzing.
• Corpus Seeding - Guides the maintenance of a representative seed corpus to maximize code coverage and provide a baseline for mutation.
• Vulnerability Discovery Methods - Provides a comprehensive guide for discovering memory safety bugs and undefined behavior in software.
• Crash Triage and Minimization - Provides methods for triaging crashes, minimizing test cases, and optimizing fuzz targets to identify security flaws.
• Memory Error Detection - Provides techniques to identify use-after-free and other memory corruption bugs using binary analysis.
• Structure-Aware Mutation - Explains how to use dictionaries and structure-aware logic to navigate and mutate complex serialized or encrypted data formats.
• Crash Deduplication and Triaging - Details processes for deduplicating crash reports and triaging findings to identify unique vulnerabilities.
• Input Mutation Strategies - Describes techniques for transforming existing test cases into mutated versions to uncover new program behaviors.
• Fuzzing Coverage Analyses - Details methods for analyzing control flow edges to identify and reach new execution paths during fuzzing.
• Continuous Fuzzing - Provides guidance on implementing continuous fuzzing loops to detect vulnerabilities as software evolves.
• CI/CD Fuzzing Integrations - Provides a framework for integrating fuzz targets into automated CI pipelines to detect regressions in every build.
• Fuzzing Instrumentation - Guides the creation of instrumented binaries and harness functions that accept byte arrays for fuzzing.
• Structured Data Mutations - Implements structure-aware mutation to fuzz complex data formats while preserving the required internal schema.
• Unit Fuzz Targets - Provides a methodology for writing simple, deterministic fuzz targets that target specific API functions.
• General Bug Detection - Describes using sanitizers and dynamic testing tools to identify memory errors and undefined behavior at runtime.
• Grammar-Based Generation - Provides methods for generating syntactically valid test cases based on formal grammars.
• Test Case Generators - Provides guidance on using structural rules and grammars to automatically generate test cases from scratch.
• Structure-Aware Fuzzers - Create fuzzers that understand specific data formats to explore deep code paths more effectively.
• Kernel Fuzzing Tools - Provides specialized frameworks for performing coverage-guided fuzzing on operating system kernels and firmware.
• Fuzzing Curricula - Provides structured educational paths for learning automated software fuzzing and vulnerability discovery.
• Technical Reference Guides - Serves as a technical reference for identifying memory safety issues and undefined behavior using binary instrumentation and crash triage.
• Stateful API Fuzzing - Provides guidance on fuzzing stateful APIs by executing structured call traces to test state-dependent logic.
• Binary Analysis Guides - Functions as a detailed manual for using binary emulation and instrumentation to detect vulnerabilities.
• Symbolic Execution Fuzzings - Combines grey-box fuzzing with symbolic execution to solve complex constraints and reach deep execution paths.
• Distributed Fuzzing Clusters - Details how to scale coverage-guided fuzzing across large clusters of machines to accelerate bug discovery.
• Dictionary-Based Mutations - Demonstrates how to use predefined dictionaries of tokens to bypass complex validation checks in target applications.
• Input Stream Splitting - Provides methods for dividing a single stream of fuzzed data into multiple sub-inputs using separators or offsets.
• API Target Decomposition - Explains how to decompose massive APIs into smaller targets to accelerate the discovery of vulnerabilities.
• Behavioral Equivalence Checkers - Details the use of behavioral equivalence checking to ensure different protocol implementations produce identical results.
• Code Coverage Analysis - Provides guidance on measuring and reporting the extent of binary execution via instrumentation blocks.
• Differential Testing - Describes differential testing techniques that compare multiple implementations to identify logic bugs via behavioral divergence.
• Cross-Implementation Parity Verifiers - Describes comparing different implementations of the same spec to detect logic bugs through behavioral divergence.
• Fuzzing Speed Optimizations - Offers strategies to increase fuzzing execution rates by optimizing memory, threads, and instrumentation.
• IDL-Based Input Generation - Ships methods for mapping complex input grammars to intermediate formats like Protocol Buffers for high-coverage testing.
• Test Case Minimization - Details techniques for reducing crashing inputs to the smallest possible byte sequence for faster bug isolation.
• Wordlists - Resources and wordlists for fuzzing applications.
• Research and Examples - Official Google resources and examples for fuzzing.
• Wordlists and Payloads - Resources and tutorials for learning about fuzzing.

Star history