Track Awesome Fuzzing Updates Daily
A curated list of awesome Fuzzing(or Fuzz Testing) for software security
🏠 Home · 🔍 Search · 🔥 Feed · 📮 Subscribe · ❤️ Sponsor · 😺 cpuu/awesome-fuzzing · ⭐ 959 · 🏷️ Security
Apr 06, 2026
Books
- Fuzzing Against the Machine: Automate vulnerability research with emulated IoT devices on QEMU (2023)
Papers / The Network and Distributed System Security Symposium (NDSS)
Papers / IEEE Symposium on Security and Privacy (IEEE S&P)
Papers / USENIX Security
- CoreCrisis: Threat-Guided and Context-Aware Iterative Learning and Fuzzing of 5G Core Networks, 2025
- WhisperFuzz: White-Box Fuzzing for Detecting and Locating Timing Vulnerabilities in Processors, 2024
Papers / ACM Conference on Computer and Communications Security (ACM CCS)
- RIoTFuzzer: Companion App Assisted Remote Fuzzing for Detecting Vulnerabilities in IoT Devices, 2024
Tools / Kernel
- ACTOR (⭐39) (2023) - An action-guided kernel fuzzing framework that generates inputs leveraging triggered actions and their temporal relationships.
- NTFuzz (⭐110) (2021) - A type-aware Windows kernel fuzzer that statically analyzes system binaries to infer system call types for more effective fuzzing.
- KRACE (⭐32) (2020) - A coverage-guided fuzzing framework that detects data races in kernel file systems by exploring concurrency through multi-threaded syscall sequences.
- Razzer (⭐379) (2019) - A kernel fuzzer that uses static analysis and two-phase fuzzing to detect race conditions and concurrency bugs in Linux kernels.
- Hydra (⭐173) (2019) - A fuzzing framework for automatically discovering semantic bugs in file systems using input mutators, feedback engines, and customizable checkers.
- Janus (⭐234) (2019) - A file system fuzzer that finds memory corruptions in Linux kernel file systems by mutating both filesystem images and syscall sequences simultaneously.
- DIFUZE (⭐384) (2017) - An interface-aware fuzzer for Linux kernel drivers that automatically recovers ioctl interfaces via LLVM analysis and generates targeted test cases.
- IMF (⭐111) (2017) - A kernel API fuzzer that leverages automated API model inference to discover vulnerabilities in macOS kernel APIs.
- kAFL (⭐592) (2017) - A hardware-assisted x86-64 VM kernel fuzzing framework with performant VM reloads for finding OS kernel vulnerabilities.
- syzkaller (⭐6.1k) (2015) - An unsupervised coverage-guided kernel fuzzer supporting FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, and Windows.
- Trinity (⭐901) (2012) - A Linux system call fuzzer that generates semi-intelligent random arguments to syscalls, including valid file descriptors, flags, and range-biased values.
Nov 20, 2023
Tools / API
- IvySyn - A fully-automated framework for discovering memory error vulnerabilities in Deep Learning (DL) frameworks.
- MINER (⭐43) - A REST API fuzzer that utilizes three data-driven designs working together to guide sequence generation, improve request generation quality, and capture unique errors caused by incorrect parameter usage.
- RestTestGen (⭐62) - A robust tool and framework designed for automated black-box testing of RESTful web APIs.
- GraphFuzz (⭐10) - An experimental framework for building structure-aware, library API fuzzers.
- Minerva (⭐35) - A browser fuzzer augmented by API mod-ref relations, aiming to synthesize highly-relevant browser API invocations in each test case.
- FANS (⭐266) - A fuzzing tool for Android native system services with four components: interface collector, interface model extractor, dependency inferer, and fuzzer engine.
Tools / CPU
- DifuzzRTL (⭐101) - A differential fuzz testing approach for CPU verification.
- MorFuzz (⭐50) - A generic RISC-V processor fuzzing framework that can efficiently detect software triggerable functional bugs.
- SpecFuzz (⭐31) - A tool to enable fuzzing for Spectre vulnerabilities.
- Transynther (⭐19) - Automatically generates and tests building blocks for Meltdown attacks with various faults and microcode assists.
Tools / Web
- TEFuzz (⭐18) - A tailored fuzzing-based framework to facilitate the detection and exploitation of template escape bugs.
- Witcher (⭐103) - A web application fuzzer that utilizes mutational fuzzing to explore web applications and fault escalation to detect command and SQL injection vulnerabilities.
- CorbFuzz (⭐6) - A state-aware fuzzer for generating as many responses from a web application as possible without need of setting up a database.
Tools / Blockchain
- Fluffy (⭐62) - A multi-transaction differential fuzzer for finding consensus bugs in Ethereum.
- LOKI (⭐20) - A Blockchain consensus protocol fuzzing framework that detects consensus memory related and logic bugs.
Tools / DBMS
- Squirrel (⭐211) - A fuzzer for database management systems (DBMSs).
Nov 06, 2023
Tools / File
- AFL++ (⭐6.4k) - A superior fork to Google's AFL with more speed, more and better mutations, more and better instrumentation, and custom module support.
- Angora (⭐955) - A mutation-based coverage guided fuzzer that increases branch coverage by solving path constraints without symbolic execution.
Jan 05, 2023
Papers / ACM Conference on Computer and Communications Security (ACM CCS)
Dec 13, 2022
Papers / The Network and Distributed System Security Symposium (NDSS)
Papers / IEEE Symposium on Security and Privacy (IEEE S&P)
Papers / USENIX Security
Papers / ACM Conference on Computer and Communications Security (ACM CCS)
Papers / The others
Nov 02, 2022
Papers / The Network and Distributed System Security Symposium (NDSS)
Jan 27, 2022
Papers / The others
Jan 26, 2022
Papers / IEEE Symposium on Security and Privacy (IEEE S&P)
Papers / USENIX Security
Papers / ACM Conference on Computer and Communications Security (ACM CCS)
Jan 25, 2022
Books
Talks
- Fuzzing Labs - Patrick Ventuzelo - YouTube.
Papers / The Network and Distributed System Security Symposium (NDSS)
Oct 12, 2020
Books
- The Fuzzing Book (2019)
Oct 07, 2020
Papers / USENIX Security
- FuzzGuard: Filtering out Unreachable Inputs in Directed Grey-box Fuzzing through Deep Learning, 2020
Jun 10, 2020
Papers / IEEE Symposium on Security and Privacy (IEEE S&P)
Mar 04, 2020
Papers / The Network and Distributed System Security Symposium (NDSS)
Papers / ArXiv (Fuzzing with Artificial Intelligence & Machine Learning)
Jan 28, 2020
Papers / The Network and Distributed System Security Symposium (NDSS)
Dec 18, 2019
Papers / ACM Conference on Computer and Communications Security (ACM CCS)
Jul 31, 2019
Talks
- Effective File Format Fuzzing - Black Hat Europe 2016.
- Adventures in Fuzzing - NYU Talk 2018.
- Fuzzing with AFL - NDC Conferences 2018.
Jul 10, 2019
Books
- The Art, Science, and Engineering of Fuzzing: A Survey (2019) - Actually, this document is a paper, but it contains more important and essential content than any other book.
Papers / IEEE Symposium on Security and Privacy (IEEE S&P)
Papers / USENIX Security
Papers / ACM Conference on Computer and Communications Security (ACM CCS)
Papers / ArXiv (Fuzzing with Artificial Intelligence & Machine Learning)
Jun 12, 2019
Papers / ArXiv (Fuzzing with Artificial Intelligence & Machine Learning)
Feb 27, 2019
Papers / The Network and Distributed System Security Symposium (NDSS)
Papers / The others
Jan 25, 2019
Papers / USENIX Security
Oct 30, 2018
Papers / USENIX Security
Papers / ArXiv (Fuzzing with Artificial Intelligence & Machine Learning)
Papers / The others
Oct 26, 2018
Books
Papers / USENIX Security
Papers / ArXiv (Fuzzing with Artificial Intelligence & Machine Learning)
Papers / The others