Fuzzing GitHub Repositories (2026) · Open Source Tools

Catch API bugs before your users do

Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.

The first open-source AI-driven tool for automatically generating system-level test cases (also known as fuzzing) for web/enterprise applications. Currently targeting whitebox and blackbox testing of Web APIs, like REST, GraphQL and RPC (e.g., gRPC and Thrift).

Scalable fuzzing infrastructure.

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

Coverage-guided, in-process fuzzing for the JVM

A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS

A coverage-guided REST API fuzzer developed on top of LibAFL

Open-source ARM64 execution lab in safe Rust: run programs on three CPU engines and prove the results match real hardware.

FANDANGO is a language-based fuzzer that leverages formal input specifications (grammars) combined with constraints to generate diverse sets of valid inputs for programs under test.

A support library for Ronin. Like activesupport, but for hacking!

blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (SBOM) for supported binaries.

syzkaller is an unsupervised coverage-guided kernel fuzzer