+
+

Related Products

  • QBench
    153 Ratings
    Visit Website
  • Air
    849 Ratings
    Visit Website
  • Cloudbrink
    28 Ratings
    Visit Website
  • Dragonfly
    16 Ratings
    Visit Website
  • CirrusPrint
    2 Ratings
    Visit Website
  • Everstage
    3,823 Ratings
    Visit Website
  • FrameworkLTC
    48 Ratings
    Visit Website
  • eToro
    32,208 Ratings
    Visit Website
  • Soraban
    8 Ratings
    Visit Website
  • MentorCity
    50 Ratings
    Visit Website

About

Fuzzing is a powerful strategy to find bugs in software. The idea is quite simple, which is to generate a large number of randomly malformed inputs for the software to parse and see what happens. If the program crashes then something is likely wrong. While fuzzing is a well-known strategy, it is surprisingly easy to find bugs, often with security implications, in widely used software. Memory access errors are the errors most likely to be exposed when fuzzing software that is written in C/C++. While they differ in the details, the core problem is often the same, the software reads or writes to the wrong memory locations. A modern Linux or BSD system ships a large number of basic tools that do some kind of file displaying and parsing. In their current state, most of these tools are not suitable for untrusted inputs. On the other hand, we have powerful tools these days that allow us to find and analyze these bugs.

About

OSS-Fuzz offers continuous fuzzing for open source software. Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and stability bugs by deploying guided in-process fuzzing of Chrome components, and we now want to share that service with the open source community. OSS-Fuzz aims to make common open source software more secure and stable by combining modern fuzzing techniques with scalable, distributed execution. Projects that do not qualify for OSS-Fuzz can run their own instances of ClusterFuzz or ClusterFuzzLite. Currently, OSS-Fuzz supports C/C++, Rust, Go, Python, and Java/JVM code. Other languages supported by LLVM may work too. OSS-Fuzz supports fuzzing x86_64 and i386 builds.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Developers and anyone in need of a tool to improve the security of their software applications

Audience

Professional users looking for a solution to uncover programming errors in their software

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Fuzzing Project
fuzzing-project.org

Company Information

Google
United States
github.com/google/oss-fuzz

Alternatives

Alternatives

go-fuzz

go-fuzz

dvyukov
ClusterFuzz

ClusterFuzz

Google
ClusterFuzz

ClusterFuzz

Google
LibFuzzer

LibFuzzer

LLVM Project
go-fuzz

go-fuzz

dvyukov

Categories

Fuzz Testing Supported

Categories

Fuzz Testing Supported

Integrations

C Supported
C++ Supported
Atheris Not Supported
ClusterFuzz Not Supported
GitHub Not Supported
Go Not Supported
Google Cloud Storage Not Supported
Java Not Supported
Python Not Supported
Rust Not Supported

Integrations

C Supported
C++ Supported
Atheris Supported
ClusterFuzz Supported
GitHub Supported
Go Supported
Google Cloud Storage Supported
Java Supported
Python Supported
Rust Supported
Claim Fuzzing Project and update features and information
Claim Fuzzing Project and update features and information
Claim Google OSS-Fuzz and update features and information
Claim Google OSS-Fuzz and update features and information