OSS-Fuzz - continuous fuzzing for open source software.

Monkey testing library for web apps and Node.js

Web Pentesting Fuzz 字典,一个就够了。

syzkaller is an unsupervised coverage-guided kernel fuzzer

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

An step by step fuzzing tutorial. A GitHub Security Lab initiative

Recent Fuzzing Paper

🐇 Fuzzing Rust code with American Fuzzy Lop

Command line helpers for fuzzing

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

一个用于前端加密Fuzz的Burp Suite插件

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

A random SQL query generator

OneScan是递归目录扫描的BurpSuite插件

coverage guided fuzz testing for javascript

A curated list of awesome directed fuzzing research papers

Fuzz your Rust code with Google-developed Honggfuzz !

ClusterFuzzLite - Simple continuous fuzzing that runs in CI.

🏆 Collection of bugs uncovered by fuzzing Rust code