Alternatives and similar repositories for kAFL:

Users that are interested in kAFL are comparing it to the libraries listed below

• intel / kernel-fuzzer-for-xen-project
  Kernel Fuzzer for Xen Project (KF/x) - Hypervisor-based fuzzing using Xen VM forking, VMI & AFL
  ☆470Updated 6 months ago
• nyx-fuzz / libxdc
  The fastest Intel-PT decoder for fuzzing
  ☆364Updated 11 months ago
• S2E / s2e
  S2E: A platform for multi-path program analysis with selective symbolic execution.
  ☆458Updated last month
• eurecom-s3 / symqemu
  SymQEMU: Compilation-based symbolic execution for binaries
  ☆339Updated 2 months ago
• HexHive / retrowrite
  RetroWrite -- Retrofitting compiler passes through binary rewriting
  ☆692Updated 8 months ago
• RUB-SysSec / kAFL
  Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
  ☆577Updated 6 years ago
• GJDuck / e9afl
  AFL binary instrumentation
  ☆294Updated last week
• GJDuck / e9patch
  A powerful static binary rewriting tool
  ☆1,000Updated last week
• compsec-snu / razzer
  A Kernel fuzzer focusing on race bugs
  ☆364Updated 5 years ago
• nyx-fuzz / Nyx
  ☆238Updated last year
• googleprojectzero / TinyInst
  A lightweight dynamic instrumentation library
  ☆1,203Updated last month
• sslab-gatech / winnie
  Winnie makes fuzzing Windows applications easy
  ☆547Updated 2 years ago
• RUB-SysSec / redqueen
  ☆378Updated 3 years ago
• googleprojectzero / SockFuzzer
  ☆434Updated 3 months ago
• nautilus-fuzz / nautilus
  A grammar based feedback Fuzzer
  ☆434Updated 5 months ago
• uds-se / FormatFuzzer
  FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs.
  ☆403Updated 2 years ago
• quarkslab / rewind
  Snapshot-based coverage-guided windows kernel fuzzer
  ☆314Updated 3 years ago
• aflsmart / aflsmart
  Smart Greybox Fuzzing (https://thuanpv.github.io/publications/TSE19_aflsmart.pdf)
  ☆508Updated 3 years ago
• aemmitt-ns / radius2
  radius2 is a fast binary emulation and symbolic execution framework using radare2
  ☆596Updated last month
• eurecom-s3 / symcc
  SymCC: efficient compiler-based symbolic execution
  ☆792Updated 6 months ago
• HexHive / FuzzGen
  ☆299Updated 3 years ago
• bcoles / kasld
  Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux kernel base virtual address a…
  ☆428Updated 9 months ago
• trailofbits / polytracker
  An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
  ☆541Updated last month
• Battelle / afl-unicorn
  afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
  ☆601Updated last year
• sslab-gatech / qsym
  QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
  ☆633Updated 2 years ago
• AFLplusplus / Grammar-Mutator
  A grammar-based custom mutator for AFL++
  ☆241Updated 7 months ago
• SunHao-0 / healer
  Kernel fuzzer inspired by Syzkaller.
  ☆274Updated 2 years ago
• andreafioraldi / qasan
  QASan is a custom QEMU 3.1.1 that detects memory errors in the guest using AddressSanitizer.
  ☆343Updated 6 months ago
• nccgroup / TriforceAFL
  AFL/QEMU fuzzing with full-system emulation.
  ☆628Updated 6 years ago
• ucsb-seclab / karonte
  Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware
  ☆398Updated 3 years ago