API Fuzzer

API Fuzzer

Fuzzapi
Honggfuzz

Honggfuzz

Google
+
+

Related Products

  • Astra Pentest
    296 Ratings
    Visit Website
  • Rocket z/Assure VAP
    1 Rating
    Visit Website
  • Aikido Security
    364 Ratings
    Visit Website
  • Criminal IP
    457 Ratings
    Visit Website
  • Criminal IP ASM
    21 Ratings
    Visit Website
  • Nexcess Digital Cloud
    205 Ratings
    Visit Website
  • Pikmykid
    235 Ratings
    Visit Website
  • ESET PROTECT Advanced
    2,332 Ratings
    Visit Website
  • NINJIO
    416 Ratings
    Visit Website
  • ManageEngine Endpoint Central
    3,347 Ratings
    Visit Website

About

API Fuzzer allows to fuzz-request attributes using common pentesting techniques and lists vulnerabilities. API Fuzzer gem accepts an API request as input and returns vulnerabilities possible in the API. Cross-site scripting vulnerability, SQL injection, blind SQL injection, XML external entity vulnerability, IDOR, API rate limiting, open redirect vulnerabilities, information disclosure flaws, info leakage through headers, and cross-site request forgery vulnerability.

About

Honggfuzz is a security-oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW-based). It’s multi-process and multi-threaded, there’s no need to run multiple copies of your fuzzer, as Honggfuzz can unlock the potential of all your available CPU cores with a single running instance. The file corpus is automatically shared and improved between all fuzzed processes. It’s blazingly fast when the persistent fuzzing mode is used. A simple/empty LLVMFuzzerTestOneInput function can be tested with up to 1mo iteration per second on a relatively modern CPU. Has a solid track record of uncovered security bugs, the only (to date) vulnerability in OpenSSL with the critical score mark was discovered by Honggfuzz. As opposed to other fuzzers, it will discover and report hijacked/ignored signals from crashes (intercepted and potentially hidden by a fuzzed program).

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Supported
Chromebook Not Supported

Audience

Individuals wanting a tool to find vulnerabilities in their code and test their applications

Audience

Anyone requiring a solution to detect coding errors and security vulnerabilities

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Fuzzapi
github.com/Fuzzapi/API-fuzzer

Company Information

Google
United States
github.com/google/honggfuzz

Alternatives

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
Vega

Vega

Subgraph
Atheris

Atheris

Google
Honggfuzz

Honggfuzz

Google
go-fuzz

go-fuzz

dvyukov

Categories

Fuzz Testing Supported

Categories

Fuzz Testing Supported

Integrations

ClusterFuzz Not Supported
Cygwin Not Supported
FreeBSD Not Supported
Google ClusterFuzz Not Supported
NetBSD Not Supported
OpenSSL Not Supported
Ruby Supported

Integrations

ClusterFuzz Supported
Cygwin Supported
FreeBSD Supported
Google ClusterFuzz Supported
NetBSD Supported
OpenSSL Supported
Ruby Not Supported
Claim API Fuzzer and update features and information
Claim API Fuzzer and update features and information
Claim Honggfuzz and update features and information
Claim Honggfuzz and update features and information