Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

LibFuzzer serves as an in-process, coverage-guided engine for evolutionary fuzzing. By being linked directly with the library under examination, it injects fuzzed inputs through a designated entry point, or target function, allowing it to monitor the code paths that are executed while creating variations of the input data to enhance code coverage. The coverage data is obtained through LLVM’s SanitizerCoverage instrumentation, ensuring that users have detailed insights into the testing process. Notably, LibFuzzer continues to receive support, with critical bugs addressed as they arise. To begin utilizing LibFuzzer with a library, one must first create a fuzz target—this function receives a byte array and interacts with the API being tested in a meaningful way. Importantly, this fuzz target operates independently of LibFuzzer, which facilitates its use alongside other fuzzing tools such as AFL or Radamsa, thereby providing versatility in testing strategies. Furthermore, the ability to leverage multiple fuzzing engines can lead to more robust testing outcomes and clearer insights into the library's vulnerabilities.

Description

Fuzz testing, commonly referred to as fuzzing, is a technique used in software testing that aims to discover implementation errors by injecting malformed or semi-malformed data in an automated way. For example, consider a scenario involving an integer variable within a program that captures a user's selection among three questions; the user's choice can be represented by the integers 0, 1, or 2, resulting in three distinct cases. Since integers are typically stored as fixed-size variables, a failure to implement the default switch case securely could lead to program crashes and various traditional security vulnerabilities. Fuzzing serves as an automated method for uncovering software implementation issues, enabling the identification of bugs when they occur. A fuzzer is a specialized tool designed to automatically inject semi-random data into the program stack, aiding in the detection of anomalies. The process of generating this data involves the use of generators, while the identification of vulnerabilities often depends on debugging tools that can analyze the program's behavior under the influence of the injected data. These generators typically utilize a mixture of established static fuzzing vectors to enhance the testing process, ultimately contributing to more robust software development practices.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Atheris Yes 
C Yes 
C++ Yes 
CI Fuzz No 
ClusterFuzz Yes 
Fuzzbuzz Yes 
Google ClusterFuzz Yes 
Jazzer Yes 

Integrations

Atheris No 
C No 
C++ No 
CI Fuzz Yes 
ClusterFuzz No 
Fuzzbuzz No 
Google ClusterFuzz No 
Jazzer No 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

LLVM Project

Founded

2003

Website

llvm.org/docs/LibFuzzer.html

Vendor Details

Company Name

OWASP

Country

United States

Website

owasp.org/www-community/Fuzzing

Product Features

Product Features

Alternatives

Atheris Reviews

Atheris

Google

Alternatives

ClusterFuzz Reviews

ClusterFuzz

Google
afl-unicorn Reviews

afl-unicorn

Battelle
Honggfuzz Reviews

Honggfuzz

Google
LibFuzzer Reviews

LibFuzzer

LLVM Project
Jazzer Reviews

Jazzer

Code Intelligence