commit	34d882b253e46dc81b81be81667dfcd918a9583a	[log] [tgz]
author	robertswiecki <robert@swiecki.net>	Mon Sep 26 11:07:53 2016 +0200
committer	GitHub <noreply@github.com>	Mon Sep 26 11:07:53 2016 +0200
tree	c9dccec12f893edc96e2c3844696cefef7a31670
parent	b2f07eb89230d9c5c92d16f027ac21ce289f2454 [diff]
parent	389352a4259b57032ac1d2c53eb745cd7767e739 [diff]

tree: c9dccec12f893edc96e2c3844696cefef7a31670

README.md

honggfuzz

Description

A general-purpose, easy-to-use fuzzer with interesting analysis options. See USAGE for more details
Supports hardware-based feedback-driven fuzzing (requires Linux and a supported CPU model), also for closed-source binaries
It works, at least, under GNU/Linux, FreeBSD, Mac OSX and Android
Can fuzz long-lasting processes (e.g. network servers like Apache's httpd and ISC's bind)
It's been used to find a few interesting security problems in major software; examples:
- FreeType 2 project: CVE-2010-2497, CVE-2010-2498, CVE-2010-2499, CVE-2010-2500, CVE-2010-2519, CVE-2010-2520, CVE-2010-2527
- Multiple bugs in the libtiff library
- Multiple bugs in the librsvg library
- Multiple bugs in the poppler library
- Multiple exploitable bugs in IDA-Pro
- ... and more

Code

Requirements

Other

This is NOT an official Google product.