Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

APIFuzzer analyzes your API specifications and systematically tests the fields to ensure your application can handle modified parameters, all without the need for programming. It allows you to import API definitions from either local files or remote URLs, supporting both JSON and YAML formats. Every HTTP method is accommodated, and it can fuzz the request body, query strings, path parameters, and request headers. Utilizing random mutations, it also integrates seamlessly with continuous integration systems. The tool can produce test reports in JUnit XML format and has the capability to send requests to alternative URLs. It supports HTTP basic authentication through configuration settings and stores reports of any failed tests in JSON format within a designated folder, thus ensuring that all results are easily accessible for review. Additionally, this enhances your ability to identify vulnerabilities and improve the reliability of your API.

Description

LibFuzzer serves as an in-process, coverage-guided engine for evolutionary fuzzing. By being linked directly with the library under examination, it injects fuzzed inputs through a designated entry point, or target function, allowing it to monitor the code paths that are executed while creating variations of the input data to enhance code coverage. The coverage data is obtained through LLVM’s SanitizerCoverage instrumentation, ensuring that users have detailed insights into the testing process. Notably, LibFuzzer continues to receive support, with critical bugs addressed as they arise. To begin utilizing LibFuzzer with a library, one must first create a fuzz target—this function receives a byte array and interacts with the API being tested in a meaningful way. Importantly, this fuzz target operates independently of LibFuzzer, which facilitates its use alongside other fuzzing tools such as AFL or Radamsa, thereby providing versatility in testing strategies. Furthermore, the ability to leverage multiple fuzzing engines can lead to more robust testing outcomes and clearer insights into the library's vulnerabilities.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

API Blueprint Yes 
Arize Phoenix Yes 
Atheris No 
BudgetML Yes 
C No 
C++ No 
CircleCI Yes 
ClusterFuzz No 
Fuzzbuzz No 
GitHub Yes 
Google ClusterFuzz No 
GraphQL Yes 
JSON Yes 
JUnit Yes 
Jazzer No 
OneDev Yes 
OpenAPIHub Yes 
Spark NLP Yes 
Swagger Yes 
XML Yes 

Integrations

API Blueprint No 
Arize Phoenix No 
Atheris Yes 
BudgetML No 
C Yes 
C++ Yes 
CircleCI No 
ClusterFuzz Yes 
Fuzzbuzz Yes 
GitHub No 
Google ClusterFuzz Yes 
GraphQL No 
JSON No 
JUnit No 
Jazzer Yes 
OneDev No 
OpenAPIHub No 
Spark NLP No 
Swagger No 
XML No 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

PyPI

Website

pypi.org/project/APIFuzzer/

Vendor Details

Company Name

LLVM Project

Founded

2003

Website

llvm.org/docs/LibFuzzer.html

Product Features

Product Features

Alternatives

go-fuzz Reviews

go-fuzz

dvyukov

Alternatives

Atheris Reviews

Atheris

Google
Echidna Reviews

Echidna

Crytic
afl-unicorn Reviews

afl-unicorn

Battelle
Peach Fuzzer Reviews

Peach Fuzzer

Peach Tech
Honggfuzz Reviews

Honggfuzz

Google
Jazzer Reviews

Jazzer

Code Intelligence