+
+

Related Products

  • MASV
    68 Ratings
    Visit Website
  • Paccurate
    11 Ratings
    Visit Website
  • Wiz
    1,088 Ratings
    Visit Website
  • Dragonfly
    16 Ratings
    Visit Website
  • Cloudbrink
    28 Ratings
    Visit Website
  • Price2Spy
    208 Ratings
    Visit Website
  • CirrusPrint
    2 Ratings
    Visit Website
  • Wave Browser
    6 Ratings
    Visit Website
  • Spidergap
    116 Ratings
    Visit Website
  • Everstage
    3,392 Ratings
    Visit Website

About

Fuzzing is a powerful strategy to find bugs in software. The idea is quite simple, which is to generate a large number of randomly malformed inputs for the software to parse and see what happens. If the program crashes then something is likely wrong. While fuzzing is a well-known strategy, it is surprisingly easy to find bugs, often with security implications, in widely used software. Memory access errors are the errors most likely to be exposed when fuzzing software that is written in C/C++. While they differ in the details, the core problem is often the same, the software reads or writes to the wrong memory locations. A modern Linux or BSD system ships a large number of basic tools that do some kind of file displaying and parsing. In their current state, most of these tools are not suitable for untrusted inputs. On the other hand, we have powerful tools these days that allow us to find and analyze these bugs.

About

Fuzz testing or fuzzing is a software testing technique, that basically consists in finding implementation bugs using malformed/semi-malformed data injection in an automated fashion. Let’s consider an integer in a program, which stores the result of a user’s choice between 3 questions. When the user picks one, the choice will be 0, 1, or 2, which makes three practical cases. Integers are stored as a static size variable. If the default switch case hasn’t been implemented securely, the program may crash and lead to “classical” security issues. Fuzzing is the art of automatic bug finding, and its role is to find software implementation faults and identify them if possible. A fuzzer is a program that automatically injects semi-random data into a program/stack and detects bugs. The data-generation part is made of generators, and vulnerability identification relies on debugging tools. Generators usually use combinations of static fuzzing vectors.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Developers and anyone in need of a tool to improve the security of their software applications

Audience

Professional users looking for a solution to find bugs automatically

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version
Free Trial

Pricing

No information available.
Free Version
Free Trial

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

Fuzzing Project
fuzzing-project.org

Company Information

OWASP
United States
owasp.org/www-community/Fuzzing

Alternatives

Alternatives

go-fuzz

go-fuzz

dvyukov
ClusterFuzz

ClusterFuzz

Google
ClusterFuzz

ClusterFuzz

Google
LibFuzzer

LibFuzzer

LLVM Project
go-fuzz

go-fuzz

dvyukov

Categories

Categories

Integrations

C
C++
CI Fuzz

Integrations

C
C++
CI Fuzz
Claim Fuzzing Project and update features and information
Claim Fuzzing Project and update features and information
Claim OWASP WSFuzzer and update features and information
Claim OWASP WSFuzzer and update features and information