kAFL
A hardware-assisted feedback fuzzing framework for discovering vulnerabilities in x86-64 OS kernels.
What is kAFL?
kAFL is an open-source fuzzing framework that discovers security vulnerabilities in operating system kernels. It uses Intel Processor Trace hardware features to perform coverage-guided fuzzing at high speeds across Linux, macOS, and Windows environments. The framework enables efficient testing of kernel components through rapid VM snapshot restoration.
Security researchers and kernel developers focused on vulnerability discovery and hardening OS security. It's particularly valuable for those analyzing x86-64 kernel subsystems and filesystem drivers.
kAFL offers hardware-accelerated fuzzing with minimal overhead compared to software-instrumented alternatives, enabling larger-scale testing campaigns. Its proven ability to find critical CVEs in production kernels demonstrates practical effectiveness where other tools struggle.
Overview
Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
Use Cases
Best For
- Discovering memory corruption vulnerabilities in Linux kernel drivers
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
