syzkaller

Operates autonomously without manual intervention, continuously generating and testing random system calls, as emphasized in its design for long-term, unsupervised fuzzing runs.

Uses code coverage feedback to prioritize untested kernel paths, systematically improving bug discovery rates with each execution cycle, a core feature highlighted in its approach.

Supports a wide range of kernels including Linux, Windows, and BSD variants, with public bug logs for each OS demonstrating cross-platform effectiveness.

Has a documented track record of uncovering critical vulnerabilities, evidenced by extensive public logs of found bugs across supported operating systems.