Honggfuzz

Honggfuzz

Google
+
+

Related Products

  • Anaconda
    625 Ratings
    Visit Website
  • JS7 JobScheduler
    1 Rating
    Visit Website
  • Parasoft
    152 Ratings
    Visit Website
  • KrakenD
    76 Ratings
    Visit Website
  • TrustInSoft Analyzer
    6 Ratings
    Visit Website
  • DXcharts
    28 Ratings
    Visit Website
  • Proton VPN
    41,009 Ratings
    Visit Website
  • Grafana Cloud
    861 Ratings
    Visit Website
  • Source Defense
    7 Ratings
    Visit Website
  • Graylog
    440 Ratings
    Visit Website

About

OSS-Fuzz offers continuous fuzzing for open source software. Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and stability bugs by deploying guided in-process fuzzing of Chrome components, and we now want to share that service with the open source community. OSS-Fuzz aims to make common open source software more secure and stable by combining modern fuzzing techniques with scalable, distributed execution. Projects that do not qualify for OSS-Fuzz can run their own instances of ClusterFuzz or ClusterFuzzLite. Currently, OSS-Fuzz supports C/C++, Rust, Go, Python, and Java/JVM code. Other languages supported by LLVM may work too. OSS-Fuzz supports fuzzing x86_64 and i386 builds.

About

Honggfuzz is a security-oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW-based). It’s multi-process and multi-threaded, there’s no need to run multiple copies of your fuzzer, as Honggfuzz can unlock the potential of all your available CPU cores with a single running instance. The file corpus is automatically shared and improved between all fuzzed processes. It’s blazingly fast when the persistent fuzzing mode is used. A simple/empty LLVMFuzzerTestOneInput function can be tested with up to 1mo iteration per second on a relatively modern CPU. Has a solid track record of uncovered security bugs, the only (to date) vulnerability in OpenSSL with the critical score mark was discovered by Honggfuzz. As opposed to other fuzzers, it will discover and report hijacked/ignored signals from crashes (intercepted and potentially hidden by a fuzzed program).

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Supported
Chromebook Not Supported

Audience

Professional users looking for a solution to uncover programming errors in their software

Audience

Anyone requiring a solution to detect coding errors and security vulnerabilities

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Google
United States
github.com/google/oss-fuzz

Company Information

Google
United States
github.com/google/honggfuzz

Alternatives

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
ClusterFuzz

ClusterFuzz

Google
Atheris

Atheris

Google
LibFuzzer

LibFuzzer

LLVM Project
go-fuzz

go-fuzz

dvyukov
go-fuzz

go-fuzz

dvyukov

Categories

Fuzz Testing Supported

Categories

Fuzz Testing Supported

Integrations

ClusterFuzz Supported
Atheris Supported
C Supported
C++ Supported
Cygwin Not Supported
FreeBSD Not Supported
GitHub Supported
Go Supported
Google Cloud Storage Supported
Google ClusterFuzz Not Supported
Java Supported
NetBSD Not Supported
OpenSSL Not Supported
Python Supported
Rust Supported

Integrations

ClusterFuzz Supported
Atheris Not Supported
C Not Supported
C++ Not Supported
Cygwin Supported
FreeBSD Supported
GitHub Not Supported
Go Not Supported
Google Cloud Storage Not Supported
Google ClusterFuzz Supported
Java Not Supported
NetBSD Supported
OpenSSL Supported
Python Not Supported
Rust Not Supported
Claim Google OSS-Fuzz and update features and information
Claim Google OSS-Fuzz and update features and information
Claim Honggfuzz and update features and information
Claim Honggfuzz and update features and information