honggfuzz

Description

A general-purpose, easy-to-use fuzzer with interesting analysis options. See USAGE for more details
Supports hardware-based feedback-driven fuzzing (requires Linux and a supported CPU model), also for closed-source binaries
It works, at least, under GNU/Linux, FreeBSD, Mac OSX and Android
Can fuzz long-lasting processes (e.g. network servers like Apache's httpd and ISC's bind)
It's been used to find a few interesting security problems in major software; examples:
- FreeType 2 project: CVE-2010-2497, CVE-2010-2498, CVE-2010-2499, CVE-2010-2500, CVE-2010-2519, CVE-2010-2520, CVE-2010-2527
- Multiple bugs in the libtiff library
- Multiple bugs in the librsvg library
- Multiple bugs in the poppler library
- Multiple exploitable bugs in IDA-Pro
- ... and more

Code

Requirements

Other

This is NOT an official Google product.

Name		Name	Last commit message	Last commit date
Latest commit History 1,080 Commits
android		android
docs		docs
examples		examples
interceptor		interceptor
libraries		libraries
linux		linux
mac		mac
posix		posix
third_party		third_party
tools		tools
.gitignore		.gitignore
CHANGELOG		CHANGELOG
CONTRIBUTING		CONTRIBUTING
COPYING		COPYING
Makefile		Makefile
README.md		README.md
arch.h		arch.h
cmdline.c		cmdline.c
cmdline.h		cmdline.h
common.h		common.h
display.c		display.c
display.h		display.h
files.c		files.c
files.h		files.h
fuzz.c		fuzz.c
fuzz.h		fuzz.h
honggfuzz.c		honggfuzz.c
log.c		log.c
log.h		log.h
mangle.c		mangle.c
mangle.h		mangle.h
report.c		report.c
report.h		report.h
sancov.c		sancov.c
sancov.h		sancov.h
subproc.c		subproc.c
subproc.h		subproc.h
util.c		util.c
util.h		util.h

Provide feedback