ffuf / ffuf

Fast web fuzzer written in Go

maurosoria / dirsearch

Web path scanner

AFLplusplus / AFLplusplus

AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

google / syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

google / honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

crytic / echidna

Ethereum smart contract fuzzer

AFLplusplus / LibAFL

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

googleprojectzero / fuzzilli

A JavaScript Engine Fuzzer

msoedov / agentic_security

Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪

Dropnation / contract-fuzzer

Ethereum smart contract fuzzer

Endava / cats

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

CodeIntelligenceTesting / jazzer

Coverage-guided, in-process fuzzing for the JVM

stanislav-web / OpenDoor

OWASP Web Recon & Directory Discovery Platform

kernelslacker / trinity

Linux system call fuzzer

WebFuzzing / EvoMaster

The first open-source AI-driven tool for automatically generating system-level test cases (also known as fuzzing) for web/enterprise applications. Currently targeting whitebox and blackbox testing of Web APIs, like REST, GraphQL and RPC (e.g., gRPC and Thrift).

tlsfuzzer / tlsfuzzer

SSL and TLS protocol test suite and fuzzer

anmolksachan / TheTimeMachine

Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not