A curated list of awesome fuzzing resources, tools, and academic papers for software security testing.
Awesome Fuzzing is a curated, community-maintained list of resources for fuzzing, an automated software testing technique that feeds invalid, unexpected, or random data to a program to find crashes, memory leaks, or other security vulnerabilities. It centralizes tools, academic papers, books, and talks to serve as a definitive reference for security researchers and developers. The project solves the problem of fragmented information by providing a structured, comprehensive overview of the fuzzing landscape.
Security researchers, penetration testers, software engineers focused on security testing, and academics studying software vulnerability discovery. It is particularly valuable for those entering the field of fuzzing or seeking the latest tools and research.
Developers and researchers choose Awesome Fuzzing because it offers an unparalleled, organized compilation of fuzzing knowledge, saving significant time in literature review and tool discovery. Its unique value lies in its extensive focus on peer-reviewed academic papers from top-tier conferences, combined with a practical taxonomy of open-source fuzzing tools.
A curated list of awesome Fuzzing(or Fuzz Testing) for software security
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Aggregates peer-reviewed papers from top security conferences (NDSS, IEEE S&P, USENIX Security, ACM CCS) from 2008 to 2025, as listed in the Papers section, providing a definitive literature review resource.
Organizes fuzzing tools by target categories like Kernel and Network based on the taxonomy from fuzzing-survey.org, making it easy to find tools for specific testing needs.
Encourages contributions via pull requests, as stated in the README ('Fork and create a Pull Request to add it!'), helping keep the list current with latest research and tools.
Compiles hundreds of fuzzing tools, books, talks, and papers in one place, saving significant time for researchers and developers exploring the field.
Admits in the README that papers are selected only if 'fuzz' is in the title, potentially missing relevant fuzzing research without that keyword, limiting comprehensiveness.
Merely lists tools without providing comparisons, performance metrics, or usage instructions, which forces users to independently assess suitability for their projects.
Focuses on resource aggregation but offers no tutorials or hands-on examples, making it challenging for newcomers to apply fuzzing techniques effectively.