API Fuzzer

API Fuzzer

Fuzzapi
Atheris

Atheris

Google
+
+

Related Products

  • Astra Pentest
    295 Ratings
    Visit Website
  • Rocket z/Assure VAP
    1 Rating
    Visit Website
  • Aikido Security
    239 Ratings
    Visit Website
  • WebCatalog Desktop
    1 Rating
    Visit Website
  • Criminal IP
    457 Ratings
    Visit Website
  • Criminal IP ASM
    21 Ratings
    Visit Website
  • Nexcess Digital Cloud
    205 Ratings
    Visit Website
  • Pikmykid
    235 Ratings
    Visit Website
  • SOCRadar Extended Threat Intelligence
    115 Ratings
    Visit Website
  • NINJIO
    416 Ratings
    Visit Website

About

API Fuzzer allows to fuzz-request attributes using common pentesting techniques and lists vulnerabilities. API Fuzzer gem accepts an API request as input and returns vulnerabilities possible in the API. Cross-site scripting vulnerability, SQL injection, blind SQL injection, XML external entity vulnerability, IDOR, API rate limiting, open redirect vulnerabilities, information disclosure flaws, info leakage through headers, and cross-site request forgery vulnerability.

About

Atheris is a coverage-guided Python fuzzing engine. It supports fuzzing of Python code, but also native extensions written for CPython. Atheris is based on libFuzzer. When fuzzing native code, Atheris can be used to catch extra bugs. Atheris supports Linux (32- and 64-bit) and Mac OS X, with Python versions 3.6-3.10. It comes with a built-in libFuzzer, which is fine for fuzzing Python code. If you plan to fuzz native extensions, you may need to build from source to ensure the libFuzzer version in Atheris matches your Clang version. Atheris relies on libFuzzer, which is distributed with Clang. Apple Clang doesn't come with libFuzzer, so you'll need to install a new version of LLVM. Atheris is based on a coverage-guided mutation-based fuzzer (LibFuzzer). This has the advantage of not requiring any grammar definition for generating inputs, making its setup easier. The disadvantage is that it will be harder for the fuzzer to generate inputs for code that parses complex data types.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Individuals wanting a tool to find vulnerabilities in their code and test their applications

Audience

Programmers wanting a fuzzing engine solution to find bugs in their applications

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version
Free Trial

Pricing

Free
Free Version
Free Trial

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

Fuzzapi
github.com/Fuzzapi/API-fuzzer

Company Information

Google
github.com/google/atheris

Alternatives

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
Jazzer

Jazzer

Code Intelligence
Vega

Vega

Subgraph
ToothPicker

ToothPicker

Secure Mobile Networking Lab
go-fuzz

go-fuzz

dvyukov
Honggfuzz

Honggfuzz

Google

Categories

Categories

Integrations

Google OSS-Fuzz
LibFuzzer
Python
Ruby

Integrations

Google OSS-Fuzz
LibFuzzer
Python
Ruby
Claim API Fuzzer and update features and information
Claim API Fuzzer and update features and information
Claim Atheris and update features and information
Claim Atheris and update features and information