Fuzzing

API

• RESTler - RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

• GitLab Protocol Fuzzer Community Edition - This is the community edition of GitLab's protocol fuzzing framework. This framework is based on Peach Fuzzer Professional with some features removed.

Java

• javafuzz - a coverage guided fuzzer for java.

Javascript

• jsfuzz - a coverage guided fuzzer for testing javascript/nodejs packages.

JSON

• jdam - a Radamsa inspired tool for fuzzing arbitrary JSON objects in a structure-aware fashion, which ensures that fuzzing results will always be valid JSON.

Python

• pythonfuzz - a coverage guided fuzzer for testing python packages.

TCP/UDP

• Fuzzotron - a simple network fuzzer supporting TCP, UDP and multithreading.

Web

• ffuf - Fuzz Faster U Fool - fast web fuzzer written in Go.