Squirrel
A coverage-guided fuzzer for database management systems (DBMSs) that uses language validity and coverage feedback.
What is Squirrel?
Squirrel is a coverage-guided fuzzer specifically designed for testing database management systems (DBMSs). It generates and mutates SQL queries while ensuring language validity and using coverage feedback to explore deep code paths in DBMSs. The tool helps identify bugs and vulnerabilities by systematically testing supported databases like SQLite, PostgreSQL, MySQL, and MariaDB.
Security researchers, database developers, and QA engineers who need to test DBMSs for bugs and vulnerabilities through automated fuzzing.
Developers choose Squirrel because it combines language-aware SQL generation with coverage-guided fuzzing, making it more effective at finding deep bugs in DBMSs compared to generic fuzzers. Its support for multiple popular databases and Docker-based setup also simplifies testing workflows.
Overview
Squirrel is a specialized fuzzer designed to test database management systems (DBMSs) by generating and mutating SQL queries. It helps uncover bugs and vulnerabilities in DBMSs by leveraging coverage-guided fuzzing techniques, ensuring the generated queries are syntactically valid and exploring deep code paths.
Key Features
- Coverage-Guided Fuzzing — Uses AFLplusplus to guide test generation based on code coverage, improving bug detection efficiency.
- Language Validity — Ensures generated SQL queries are syntactically correct for the target DBMS, reducing invalid test cases.
- Multi-DBMS Support — Currently supports SQLite, PostgreSQL, MySQL, and MariaDB.
- Two Execution Modes — Offers normal mode for SQLite and client/server mode for MySQL, MariaDB, and PostgreSQL.
- Docker Integration — Provides Docker-based build and run instructions for easy setup and reproducibility.
Philosophy
Squirrel focuses on combining language-aware query generation with coverage feedback to systematically test DBMSs, aiming to uncover hard-to-find bugs through intelligent fuzzing strategies.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.