fuzzing targets generation

Fuzzing targets generation

• Many programming languages
  • CIFuzz, https://github.com/CodeIntelligenceTesting/cifuzz
• Golang
  • Ngolo-fuzzing - Automatic fuzz targets generation for Golang packages
• C/C++
  • UTopia - is a tool for automatically generating fuzz drivers from unit tests.
  • FUTAG - FUzzing Target Automated Generator.
  • https://github.com/UnitTestBot/UTBotCpp- tool that generates unit test by C/C++ source code, trying to reach all branches and maximize code coverage.
  • https://github.com/HexHive/FuzzGen
  • FuzzBuilder
  • Auto-Fuzz (JVM, Python, C/C++)
  • FuzzDriverGPT
  • APICraft
• Python
  • HypoFuzz https://hypofuzz.com/docs/roadmap.html
  • Hypothesis - https://hypothesis.readthedocs.io/en/latest/ghostwriter.html
  • Hypothesis, https://timothycrosley.github.io/hypothesis-auto/
• Java
  • Jazzer with autofuzz, https://www.code-intelligence.com/blog/autofuzz
  • Rubick
• Haskell
  • https://github.com/nick8325/quickspec
  • https://hackage.haskell.org/package/quickspec-2.1.5/docs/QuickSpec.html
  • https://smallbone.se/papers/quickspec2.pdf
• Lua
  • Unit test code generator for lua programming language, Conference: 2015 International Conference on Data and Software Engineering (ICoDSE)
• Golang
  • https://github.com/thepudds/fzgen - auto-generation Go 1.18 fuzzing wrappers from normal code. Finds buggy call sequences, including data races & deadlocks. Supports rich signature types.

References:

• A Case Study on Automated Fuzz Target Generation for Large Codebases - https://arxiv.org/pdf/1907.12214.pdf