Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
FuzzDB was developed to enhance the chances of identifying security vulnerabilities in applications through dynamic testing methods. As the first and most extensive open repository of fault injection patterns, along with predictable resource locations and regex for server response matching, it serves as an invaluable resource. This comprehensive database includes detailed lists of attack payload primitives aimed at fault injection testing. The patterns are organized by type of attack and, where applicable, by the platform, and they are known to lead to vulnerabilities such as OS command injection, directory listings, directory traversals, source code exposure, file upload bypass, authentication bypass, cross-site scripting (XSS), HTTP header CRLF injections, SQL injection, NoSQL injection, and several others. For instance, FuzzDB identifies 56 patterns that might be interpreted as a null byte, in addition to offering lists of frequently used methods and name-value pairs that can activate debugging modes. Furthermore, the resource continuously evolves as it incorporates new findings and community contributions to stay relevant against emerging threats.
Description
Syzkaller functions as an unsupervised, coverage-guided fuzzer aimed at exploring vulnerabilities within kernel environments, offering support for various operating systems such as FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, and Windows. Originally designed with a focus on fuzzing the Linux kernel, its capabilities have been expanded to encompass additional operating systems over time. When a kernel crash is identified within one of the virtual machines, syzkaller promptly initiates the reproduction of that crash. By default, it operates using four virtual machines for this reproduction process and subsequently works to minimize the program responsible for the crash. This reproduction phase can temporarily halt fuzzing activities, as all VMs may be occupied with reproducing the identified issues. The duration for reproducing a single crash can vary significantly, ranging from mere minutes to potentially an hour, depending on the complexity and reproducibility of the crash event. This ability to minimize and analyze crashes enhances the overall effectiveness of the fuzzing process, allowing for better identification of vulnerabilities in the kernel.
API Access
Has API
API Access
Has API
Integrations
BlackArch Linux
FreeBSD
Fuchsia Service Maintenance Software
NetBSD
NoSQL
OWASP ZAP
OpenBSD
Integrations
BlackArch Linux
FreeBSD
Fuchsia Service Maintenance Software
NetBSD
NoSQL
OWASP ZAP
OpenBSD
Pricing Details
Free
Free Trial
Free Version
Pricing Details
Free
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
FuzzDB
Website
github.com/fuzzdb-project/fuzzdb
Vendor Details
Company Name
Country
United States
Website
github.com/google/syzkaller