go-fuzz
A coverage-guided fuzzing solution for testing Go packages, especially those parsing complex or untrusted inputs.
What is go-fuzz?
go-fuzz is a coverage-guided fuzzing tool for the Go programming language. It automatically generates random inputs to test Go packages, aiming to discover crashes, hangs, memory issues, and logical bugs. It is especially useful for packages that parse complex or untrusted data, helping developers harden their code against malicious inputs.
Go developers working on packages that parse inputs (e.g., image decoders, protocol parsers, text processors) or systems exposed to untrusted data (e.g., network services, file parsers). It is also valuable for security researchers and teams prioritizing robustness.
go-fuzz provides a powerful, automated way to uncover deep, hard-to-find bugs in Go code that traditional testing often misses. Its coverage-guided approach efficiently explores code paths, and its integration with the Go toolchain and support for custom validation logic make it both practical and highly effective for improving code reliability.
Overview
Randomized testing for Go
Use Cases
Best For
- Hardening network parsers and protocol implementations against malicious inputs
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.