Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

ClusterFuzz is an advanced fuzzing platform designed to identify security vulnerabilities and stability problems within software applications. Utilized by Google for all its products, it also serves as the fuzzing backend for OSS-Fuzz. This infrastructure offers a plethora of features that facilitate the integration of fuzzing into the development lifecycle of software projects. It includes fully automated processes for bug filing, triage, and resolution across different issue trackers. Moreover, it supports various coverage-guided fuzzing engines to achieve optimal outcomes through techniques like ensemble fuzzing and diverse fuzzing strategies. The platform provides detailed statistics for evaluating fuzzer efficiency and tracking crash rates. Its user-friendly web interface simplifies management tasks and crash examinations, while it also accommodates multiple authentication providers via Firebase. Additionally, ClusterFuzz supports black-box fuzzing, minimizes test cases, and employs regression identification through bisection techniques, making it a comprehensive solution for software testing. The versatility and robustness of ClusterFuzz truly enhance the software development process.

Description

LibFuzzer serves as an in-process, coverage-guided engine for evolutionary fuzzing. By being linked directly with the library under examination, it injects fuzzed inputs through a designated entry point, or target function, allowing it to monitor the code paths that are executed while creating variations of the input data to enhance code coverage. The coverage data is obtained through LLVM’s SanitizerCoverage instrumentation, ensuring that users have detailed insights into the testing process. Notably, LibFuzzer continues to receive support, with critical bugs addressed as they arise. To begin utilizing LibFuzzer with a library, one must first create a fuzz target—this function receives a byte array and interacts with the API being tested in a meaningful way. Importantly, this fuzz target operates independently of LibFuzzer, which facilitates its use alongside other fuzzing tools such as AFL or Radamsa, thereby providing versatility in testing strategies. Furthermore, the ability to leverage multiple fuzzing engines can lead to more robust testing outcomes and clearer insights into the library's vulnerabilities.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Atheris No 
C No 
C++ No 
ClusterFuzz No 
Firebase Yes 
Fuzzbuzz No 
Google ClusterFuzz No 
Google OSS-Fuzz Yes 
Honggfuzz Yes 
Jazzer No 
Jira Yes 
LibFuzzer Yes 
american fuzzy lop Yes 

Integrations

Atheris Yes 
C Yes 
C++ Yes 
ClusterFuzz Yes 
Firebase No 
Fuzzbuzz Yes 
Google ClusterFuzz Yes 
Google OSS-Fuzz No 
Honggfuzz No 
Jazzer Yes 
Jira No 
LibFuzzer No 
american fuzzy lop No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Google

Country

United States

Website

google.github.io/clusterfuzz/

Vendor Details

Company Name

LLVM Project

Founded

2003

Website

llvm.org/docs/LibFuzzer.html

Product Features

Product Features

Alternatives

Alternatives

Atheris Reviews

Atheris

Google
afl-unicorn Reviews

afl-unicorn

Battelle
Honggfuzz Reviews

Honggfuzz

Google
Peach Fuzzer Reviews

Peach Fuzzer

Peach Tech
Jazzer Reviews

Jazzer

Code Intelligence