Honggfuzz

Honggfuzz

Google
Mayhem

Mayhem

ForAllSecure
+
+

Related Products

  • Digital WarRoom
    55 Ratings
    Visit Website
  • Forethought
    166 Ratings
    Visit Website
  • Gushwork
    29 Ratings
    Visit Website
  • AlsoThere
    1 Rating
    Visit Website
  • TradingView Stock Widgets
    16 Ratings
    Visit Website
  • WinningBidder.com
    165 Ratings
    Visit Website
  • Filerev
    3 Ratings
    Visit Website
  • Striven
    234 Ratings
    Visit Website
  • Bluepear
    70 Ratings
    Visit Website
  • Fax.Cloud
    1 Rating
    Visit Website

About

Honggfuzz is a security-oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW-based). It’s multi-process and multi-threaded, there’s no need to run multiple copies of your fuzzer, as Honggfuzz can unlock the potential of all your available CPU cores with a single running instance. The file corpus is automatically shared and improved between all fuzzed processes. It’s blazingly fast when the persistent fuzzing mode is used. A simple/empty LLVMFuzzerTestOneInput function can be tested with up to 1mo iteration per second on a relatively modern CPU. Has a solid track record of uncovered security bugs, the only (to date) vulnerability in OpenSSL with the critical score mark was discovered by Honggfuzz. As opposed to other fuzzers, it will discover and report hijacked/ignored signals from crashes (intercepted and potentially hidden by a fuzzed program).

About

Advanced fuzzing solution that combines guided fuzzing with symbolic execution, a patented technology from CMU. Mayhem is an advanced fuzz testing solution that dramatically reduces manual testing efforts with autonomous defect detection and validation. Deliver safe, secure, reliable software with less time, cost, and effort. Mayhem’s unique advantage is in its ability to acquire intelligence of its targets over time. As Mayhem’s knowledge grows, it deepens its analysis and maximizes its code coverage. All reported vulnerabilities are exploitable, confirmed risks. Mayhem guides remediation efforts with in-depth system level information, such as backtraces, memory logs, and register state, expediting issue diagnosis and fixes. Mayhem utilizes target feedback to custom generate test cases on the fly -- meaning no manual test case generation required. Mayhem offers access to all of its test cases to make regression testing effortless and continuous.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Anyone requiring a solution to detect coding errors and security vulnerabilities

Audience

Enterprisesses, comercial or government organizations interested in DevSecOps security applications

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version Supported
Free Trial Not Supported

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Supported

Company Information

Google
United States
github.com/google/honggfuzz

Company Information

ForAllSecure
Founded: 2012
United States
www.forallsecure.com

Alternatives

LibFuzzer

LibFuzzer

LLVM Project

Alternatives

Atheris

Atheris

Google
CourtCaseFinder.com

CourtCaseFinder.com

Court Case Finder
go-fuzz

go-fuzz

dvyukov

Categories

Fuzz Testing Supported

Categories

Automated Testing Supported
Code Coverage Supported
Fuzz Testing Supported
Regression Testing Supported

Automated Testing Features

Hierarchical View Not Supported
Move & Copy Not Supported
Parameterized Testing Not Supported
Requirements-Based Testing Not Supported
Security Testing Supported
Supports Parallel Execution Not Supported
Test Script Reviews Not Supported
Unicode Compliance Not Supported

Integrations

Bamboo Not Supported
ClusterFuzz Supported
Cygwin Supported
Docker Not Supported
Drone Not Supported
FreeBSD Supported
Google Cloud Platform Not Supported
Google ClusterFuzz Supported
Jenkins Not Supported
NetBSD Supported
Okta Not Supported
OpenSSL Supported
Slack Not Supported
Travis CI Not Supported

Integrations

Bamboo Supported
ClusterFuzz Not Supported
Cygwin Not Supported
Docker Supported
Drone Supported
FreeBSD Not Supported
Google Cloud Platform Supported
Google ClusterFuzz Not Supported
Jenkins Supported
NetBSD Not Supported
Okta Supported
OpenSSL Not Supported
Slack Supported
Travis CI Supported
Claim Honggfuzz and update features and information
Claim Honggfuzz and update features and information
Claim Mayhem and update features and information
Claim Mayhem and update features and information