Fuzzing
A curated list of awesome fuzzing resources, tools, and academic papers for software security testing.
What is Fuzzing?
Awesome Fuzzing is a curated, community-maintained list of resources for fuzzing, an automated software testing technique that feeds invalid, unexpected, or random data to a program to find crashes, memory leaks, or other security vulnerabilities. It centralizes tools, academic papers, books, and talks to serve as a definitive reference for security researchers and developers. The project solves the problem of fragmented information by providing a structured, comprehensive overview of the fuzzing landscape.
Security researchers, penetration testers, software engineers focused on security testing, and academics studying software vulnerability discovery. It is particularly valuable for those entering the field of fuzzing or seeking the latest tools and research.
Developers and researchers choose Awesome Fuzzing because it offers an unparalleled, organized compilation of fuzzing knowledge, saving significant time in literature review and tool discovery. Its unique value lies in its extensive focus on peer-reviewed academic papers from top-tier conferences, combined with a practical taxonomy of open-source fuzzing tools.
Overview
A curated list of awesome Fuzzing(or Fuzz Testing) for software security
Use Cases
Best For
- Security researchers conducting a literature review on fuzzing techniques
- Developers looking for the right fuzzing tool for a specific target (e.g., kernel, network protocol)
- Students and academics studying automated software testing and vulnerability discovery
- Penetration testers building a toolkit for security assessments
- Engineers wanting to understand state-of-the-art fuzzing research from top security conferences
- Tool maintainers seeking to discover related projects and research in the fuzzing ecosystem
Not Ideal For
- Developers needing an integrated fuzzing platform with built-in execution, analysis, and GUI tools
- Teams requiring real-time alerts on newly discovered fuzzing vulnerabilities or exploits
- Beginners seeking step-by-step, tutorial-based guidance to learn fuzzing from scratch
Pros & Cons
Pros
Aggregates peer-reviewed papers from top security conferences (NDSS, IEEE S&P, USENIX Security, ACM CCS) from 2008 to 2025, as listed in the Papers section, providing a definitive literature review resource.
Organizes fuzzing tools by target categories like Kernel and Network based on the taxonomy from fuzzing-survey.org, making it easy to find tools for specific testing needs.
Encourages contributions via pull requests, as stated in the README ('Fork and create a Pull Request to add it!'), helping keep the list current with latest research and tools.
Compiles hundreds of fuzzing tools, books, talks, and papers in one place, saving significant time for researchers and developers exploring the field.
Cons
Admits in the README that papers are selected only if 'fuzz' is in the title, potentially missing relevant fuzzing research without that keyword, limiting comprehensiveness.
Merely lists tools without providing comparisons, performance metrics, or usage instructions, which forces users to independently assess suitability for their projects.
Focuses on resource aggregation but offers no tutorials or hands-on examples, making it challenging for newcomers to apply fuzzing techniques effectively.
Frequently Asked Questions
Related Projects
HackingA curated list of awesome Hacking tutorials, tools and resources
SecurityA collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
Malware AnalysisDefund the Police.
Web Security🐶 A curated list of Web Security materials and resources.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.