LibFuzzer

LibFuzzer

LLVM Project
FuzzDB LibFuzzer

Related Products

  • Bitdefender Ultimate Small Business Security
    5.0 out of 5 stars 5 Ratings
    Visit Website for Bitdefender Ultimate Small Business Security
  • cside
    4.9 out of 5 stars 37 Ratings
    Visit Website for cside
  • Insightful
    4.7 out of 5 stars 707 Ratings
    Visit Website for Insightful
  • ManageEngine ADManager Plus
    4.6 out of 5 stars 720 Ratings
    Visit Website for ManageEngine ADManager Plus
  • Cerberus FTP Server
    4.8 out of 5 stars 159 Ratings
    Visit Website for Cerberus FTP Server
  • Gaffa
    5.0 out of 5 stars 5 Ratings
    Visit Website for Gaffa
  • NINJIO
    4.8 out of 5 stars 416 Ratings
    Visit Website for NINJIO
  • Parasoft
    4.6 out of 5 stars 152 Ratings
    Visit Website for Parasoft
  • Letsignit
    4.5 out of 5 stars 274 Ratings
    Visit Website for Letsignit
  • Criminal IP
    4.6 out of 5 stars 459 Ratings
    Visit Website for Criminal IP
FuzzDB:

About

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses. FuzzDB contains comprehensive lists of attack payload primitives for fault injection testing. These patterns, categorized by the attack and where appropriate platform type, are known to cause issues like OS command injection, directory listings, directory traversals, source exposure, file upload bypass, authentication bypass, XSS, HTTP header crlf injections, SQL injection, NoSQL injection, and more. For example, FuzzDB catalogs 56 patterns that can potentially be interpreted as a null byte and contains lists of commonly used methods and name-value pairs that trigger debug modes.
LibFuzzer:

About

LibFuzzer is an in-process, coverage-guided, evolutionary fuzzing engine. LibFuzzer is linked with the library under test, and feeds fuzzed inputs to the library via a specific fuzzing entry point (or target function); the fuzzer then tracks which areas of the code are reached, and generates mutations on the corpus of input data in order to maximize the code coverage. The code coverage information for libFuzzer is provided by LLVM’s SanitizerCoverage instrumentation. LibFuzzer is still fully supported in that important bugs will get fixed. The first step in using libFuzzer on a library is to implement a fuzz target, a function that accepts an array of bytes and does something interesting with these bytes using the API under test. Note that this fuzz target does not depend on libFuzzer in any way so it is possible and even desirable to use it with other fuzzing engines like AFL and/or Radamsa.
FuzzDB:

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported
LibFuzzer:

Platforms Supported

Windows Supported
Mac Not Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported
FuzzDB:

Audience

Anyone requiring a security scanner solution to test their application protocols
LibFuzzer:

Audience

Users requiring a fuzzing engine to analyze their code and applications
FuzzDB:

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported
LibFuzzer:

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported
FuzzDB:

API

Offers API Not Supported
LibFuzzer:

API

Offers API Supported
FuzzDB:

Screenshots and Videos

LibFuzzer:

Screenshots and Videos

FuzzDB:

Pricing

Free
Free Version Supported
Free Trial Not Supported
LibFuzzer:

Pricing

Free
Free Version Supported
Free Trial Not Supported
FuzzDB:

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software
LibFuzzer:

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software
FuzzDB:

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported
LibFuzzer:

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported
FuzzDB:

Company Information

FuzzDB
github.com/fuzzdb-project/fuzzdb
LibFuzzer:

Company Information

LLVM Project
Founded: 2003
llvm.org/docs/LibFuzzer.html
FuzzDB:

Alternatives

LibFuzzer:

Alternatives

afl-unicorn

afl-unicorn

Battelle
FuzzDB:
API Fuzzer

API Fuzzer

Fuzzapi
LibFuzzer:
Atheris

Atheris

Google
FuzzDB:
LibFuzzer:
Jazzer

Jazzer

Code Intelligence
FuzzDB:
CI Fuzz

CI Fuzz

Code Intelligence
LibFuzzer:
Honggfuzz

Honggfuzz

Google
FuzzDB:
LibFuzzer:
FuzzDB:

Categories

Fuzz Testing Supported
LibFuzzer:

Categories

Fuzz Testing Supported
FuzzDB:

Integrations

Atheris Not Supported
BlackArch Linux Supported
C Not Supported
C++ Not Supported
ClusterFuzz Not Supported
Fuzzbuzz Not Supported
Google ClusterFuzz Not Supported
Jazzer Not Supported
NoSQL Supported
OWASP ZAP Supported
LibFuzzer:

Integrations

Atheris Supported
BlackArch Linux Not Supported
C Supported
C++ Supported
ClusterFuzz Supported
Fuzzbuzz Supported
Google ClusterFuzz Supported
Jazzer Supported
NoSQL Not Supported
OWASP ZAP Not Supported
FuzzDB:
Claim FuzzDB and update features and information
Claim FuzzDB and update features and information
LibFuzzer:
Claim LibFuzzer and update features and information
Claim LibFuzzer and update features and information