commit: cb5a13f3b54e3b20b58ad26e4e4dfb860d9bbcde
[log]
author: Anestis Bechtsoudis <anestis@census-labs.com>
Mon Oct 12 08:38:56 2015 -0700
committer: Anestis Bechtsoudis <anestis@census-labs.com>
Mon Oct 12 08:38:56 2015 -0700
tree: 94ef8d06da8eef34a7dada2e5fa7541ac4987f25
parent: 9137144ab69be03db80d3172691e9f9d27bff333 [diff]
parent: 0c554598f723fd6b1aa9211f486d367b5e11f039 [diff]

tree: 94ef8d06da8eef34a7dada2e5fa7541ac4987f25

README.md

honggfuzz

Description

A general-purpose, easy-to-use fuzzer with interesting analysis options. See README wiki page for more details
Supports hardware-based feedback-driven fuzzing (requires Linux and a supported CPU model), also for closed-source binaries
It works, at least, under GNU/Linux, FreeBSD, Mac OSX and Android
Can fuzz long-lasting processes (e.g. network servers like Apache‘s httpd and ISC’s bind)
It's been used to find a few interesting security problems in major software; examples:
- FreeType 2 project: CVE-2010-2497, CVE-2010-2498, CVE-2010-2499, CVE-2010-2500, CVE-2010-2519, CVE-2010-2520, CVE-2010-2527
- Multiple bugs in the libtiff library
- Multiple bugs in the librsvg library
- Multiple bugs in the poppler library
- Multiple exploitable bugs in IDA-Pro
- ... and more

Code

Requirements

Other

This is NOT an official Google product.