Open-source alternatives to Honggfuzz

Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM

Sloth 🦥 is a coverage guided fuzzing framework for fuzzing Android Native libraries that makes use of libFuzzer and QEMU user-mode emulation

a general-purpose fuzzer

Coverage-guided, in-process fuzzing for the JVM

go-fuzz is a coverage-guided randomized testing tool for identifying crashes and logic bugs in Go code. It consists of a fuzzer that evolves random inputs based on code execution paths, an instrumentation tool that produces binaries for tracking coverage, and a seed corpus manager. The tool utilizes compile-time binary instrumentation to monitor branch coverage and employs a feedback-driven mutation loop to prioritize inputs that reach new sections of the codebase. It includes capabilities for comparative differential testing to identify logic errors by executing different implementations of

Media Fuzzing Framework for Android

Syzkaller is an unsupervised, coverage-guided kernel fuzzer that automatically generates and mutates system call sequences to find bugs in operating system kernels. It operates without human intervention, using a closed feedback loop of input generation, execution, crash detection, and corpus refinement to continuously explore kernel code paths. The fuzzer distinguishes itself by supporting multiple operating system kernels, including Linux, FreeBSD, and Windows, through per-platform syscall harnesses that abstract system call interfaces behind a common driver. It uses declarative description

A fork of AFL for fuzzing Windows binaries

Bug hunting through fuzzer/*-sanitizer/etc...

RetroWrite -- Retrofitting compiler passes through binary rewriting

SOSP'25 Automatic checker synthesis for system-level static analysis

This project is a curated, version-controlled directory of software and resources designed for cybersecurity professionals and researchers. It functions as a centralized knowledge base that aggregates and organizes external security utilities into a structured taxonomy to facilitate discovery and access for specialized research and testing tasks. The repository distinguishes itself through a community-driven model where external resource locations are verified and maintained by contributors. By leveraging a distributed version control system, the project ensures the historical integrity and c

A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process

Linux kernel source tree

Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.

AFL/QEMU fuzzing with full-system emulation.

MCP agent for Linux kernel PATCH, syzkaller

Cloudfuzzer is a cloud fuzzing framework. Purpose of cloudfuzzer is to make it possible to easily run automated fuzz-testing in cloud environment.

ISSTA 2025 Unlocking Low Frequency Syscalls in Kernel Fuzzing with Dependency-Based RAG

Ph.D. student in the Department of Computer Science & Engineering, at the University of Minnesota (Twin Cities)

This repository contains the material associated with the blogpost Android greybox fuzzing with AFL++ Frida mode.

Dynamic Race Detection with LLVM compiler (Runtime Verification 2011, co-authored with Kostya Serebryany, Timur Iskhodzhanov, Dmitriy Vyukov)