Skip to content

AngoraFuzzer/FuzzingRealProgramBenchStatistics

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

Fuzzing Benchmark - Real world programs

List the real world programs evaluated in fuzzing papers. Rank

TODO: count #CVE

Dowser - Dowsing for Overflows: A Guided Fuzzer to Find Buffer Boundary Violations

  • nginx
  • ffmpeg
  • inspircd
  • poppler (libpoppler)
  • libpoppler
  • libexif
  • snort

MAYHEM - Unleashing Mayhem on Binary Code

  • a2ps
  • aeon
  • aspell
  • atphttpd
  • faceradius
  • ghostscript
  • glftpd
  • gnugol
  • htget
  • htpasswd
  • iwdconfig
  • mbse-bbs
  • ncompress
  • orzhttpd
  • psutils
  • rsync
  • sharutils
  • socat
  • squirrel mail
  • tipxd
  • xgalaga
  • xtokkaetama

FuzzSim -Scheduling Black-box Mutational Fuzzing

  • ffmpeg
  • 100 different Linux applications (unknown)

COVERSET - Optimizing Seed Selection for Fuzzing

  • xpdf
  • mupdf
  • pdf2svg (libpoppler)
  • libpoppler
  • ffmpeg
  • mplayer
  • mp3gain
  • eog
  • convert
  • gif2png (libpng)
  • libpng
  • jpegtran (libjpeg)
  • libjpeg

SYMFUZZ - Program-Adaptive Mutational Fuzzing

  • abcm2ps
  • autotrace
  • bib2xml
  • catdvi
  • figtoipe
  • gif2png (libpng)
  • libpng
  • pdf2svg (libpoppler)
  • libpoppler
  • mupdf

MutaGen - Turning Programs Against Each Other: High Coverage Fuzz-testing Using Binary-code Mutation and Dynamic Slicing.

  • avconv
  • convert
  • nconvert
  • pdftocairo
  • mudraw
  • mupdf
  • pdftops
  • ps2pdf
  • inkscape

AFLFast - Coverage-based Greybox Fuzzing as Markov Chain

  • nm (binutils)
  • objdump (binutils)
  • strings (binutils)
  • size (binutils)
  • c++filt (binutils)
  • binutils

SeededFuzz - Selecting and Generating Seeds for Directed Fuzzing

  • mpeg3dump (libmpeg3)
  • libmpeg3
  • png2swf (swftools)
  • gif2swf (swftools)
  • swftools
  • cjpeg (libjpeg)
  • libjpeg
  • speexenc

VUzzer - Application-aware Evolutionary Fuzzing

  • mpg321 (libasound)
  • libasound
  • gif2png (libpng)
  • libpng
  • pdf2svg (libpoppler)
  • libpoppler
  • tcpdump (libpcap)
  • tcptrace (libpcap)
  • libpcap
  • djpeg (libjpeg)
  • libjpeg

Steelix - Program-State Based Binary Fuzzing

  • tiff2pdf (libtiff)
  • tiffcp (libtiff)
  • libtiff
  • pngfix (libpng)
  • libpng
  • gzip
  • tcpdump (libpcap)
  • libpcap

Skyfire - Data-Driven Seed Generation for Fuzzing

  • Sablotron
  • libxslt
  • libxml2
  • Javascript engine in Internet Explorer

kAFL - Hardware-Assisted Feedback Fuzzing for OS Kernels

  • Windows
  • Linux
  • macOS

DIFUZE - Interface Aware Fuzzing for Kernel Drivers.

  • ioctl handlers

Orthrus - Static Program Analysis as a Fuzzing Aid

  • c-ares
  • libxml2
  • openssl
  • nDPI
  • tcpdump (libpcap)
  • libpcap
  • woff2

Chizpurfle - A Gray-Box Android Fuzzer for Vendor Service Customizations

  • Android services

VDF - Targeted Evolutionary Fuzz Testing of Virtual Devices

  • Virtual devices

IMF - Inferred Model-based Fuzzer

  • macOS API

NEZHA - Efficient Domain-Independent Differential Testing

  • openssl
  • libressl
  • boringssl
  • wolfssl
  • mbedtls
  • gnutls
  • binutils (libbfd)
  • clamav (libclamav)
  • xzutils
  • evince
  • mupdf
  • xpdf

S2F - Discover Hard-to-Reach Vulnerabilities by Semi-Symbolic Fuzz Testing

  • readelf (binutils)
  • objdump (binutils)
  • binutils
  • djpeg (libjpeg)
  • libjpeg
  • gzip
  • ffmpeg
  • tcpdump (libpcap)
  • libpcap
  • capstone
  • gif2png (libpng)
  • libpng

FairFuzz - Targeting Rare Branches to Rapidly Increase Greybox Fuzz Testing Coverage

  • tcpdump (libpcap)
  • libpcap
  • nm (binutils)
  • objdump (binutils)
  • readelf (binutils)
  • c++filt (binutils)
  • binutils
  • mutool draw (mupdf)
  • mupdf
  • xmllint (libxml2)
  • libxml2
  • djpeg (libjpeg)
  • libjpeg
  • readpng (libpng)
  • libpng

Angora - Efficient Fuzzing by Principled Search

  • file
  • jhead
  • xmlwf (expat)
  • expat
  • djpeg (libjpeg)
  • libjpeg
  • readpng (libpng)
  • libpng
  • nm (binutils)
  • objdump (binutils)
  • size (binutils)
  • binutils

T-Fuzz - fuzzing by program transformation

  • pngfix (libpng)
  • libpng
  • tiffinfo (libtiff)
  • libtiff
  • ImageMagick
  • pdftohtml (lipoppler)
  • libpoppler

MEDS - Enhancing Memory Error Detection for Large-Scale Applications and Fuzz Testing

  • chorme
  • firefox
  • apche
  • nginx
  • PHP7
  • lci
  • picoc
  • ImageMagick
  • wren
  • espruino
  • tinyvm
  • raptor
  • swftools
  • exifprobe
  • metacam
  • jhead

CollAFL - Path Sensitive Fuzzing

  • catdoc
  • tiff2pdf (libtiff)
  • tiff2ps (libtiff)
  • tiffset (libtiff)
  • libtiff
  • listswf (libming)
  • libming
  • objdump (binutils)
  • nm (binutils)
  • binutils
  • tcpdump (libpcap)
  • libpcap
  • exiv2
  • vim
  • nasm
  • libncurses
  • clamav (libclamav)
  • libav
  • libtorrent
  • libpspp
  • libsass
  • libdwarf
  • bison
  • cflow

NEUZZ - Efficient Fuzzing with Neural Program Smoothing

  • readelf (binutils)
  • harfbuzz
  • libjpeg
  • mupdf
  • libxml
  • nm (binutils)
  • objdump (binutils)
  • size (binutils)
  • strip
  • zlib
  • binutils

Full-speed Fuzzing: Reducing Fuzzing Overhead through Coverage-guided Tracing

  • bsdtar (libarchive)
  • libarchive
  • cer-basic (libksba)
  • libksba
  • cjson
  • djpeg (libjpeg)
  • libjpeg
  • pdftohtml (libpoppler)
  • libpoppler
  • readelf (binutils)
  • binutils
  • sfconvert (audiofile)
  • audiofile
  • tcpdump (libpcap)
  • libpcap

REDQUEEN: Fuzzing with Input-to-State Correspondence

  • ar (binutils)
  • size (binutils)
  • c++filt (binutils)
  • strings (binutils)
  • nm (binutils)
  • objdump (binutils)
  • readelf (binutils)
  • as (bintutils)
  • binutils
  • gprof
  • tiff2ps (libtiff)
  • libtiff
  • jhead
  • fdk-acc
  • ImageMagick
  • wine
  • mruby
  • sam2p
  • bash
  • libxml2
  • perl

NAUTILUS: Fishing for Deep Bugs with Grammars

  • mruby
  • PHP
  • Lua
  • ChakracCore

Smart Greybox Fuzzing

  • mpg321
  • gif2png (libpng)
  • libpng
  • pdf2svg (libpoppler)
  • libpoppler
  • tcpdump (libpcap)
  • tcptrace (libpcap)
  • libpcap
  • djpeg (libjpeg)
  • libjpeg

Qsym : A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing

  • libjpeg
  • libpng
  • libtiff
  • lepton
  • openjpeg
  • tcpdump (libpcap)
  • libpcap
  • file
  • libarchive
  • audiofile
  • ffmpeg
  • binutils

TIFF: Using Input Type Inference To Improve Fuzzing

  • mpg321 (libasound)
  • libasound
  • pdf2svg (libpoppler)
  • libpoppler
  • jbig2dev (libjbig2dev)
  • potrace (libpotrace)
  • gif2png (libpng)
  • libpng
  • tcptrace (libpcap)
  • libpcap
  • autotrace (libautotrace)
  • pdftocairo (libcairo)
  • convert (*libGraphicsMagick)

About

List the real world programs evaluated in fuzzing papers.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages