Alternatives and similar repositories for kAFL

Users that are interested in kAFL are comparing it to the libraries listed below

• intel / kernel-fuzzer-for-xen-project
  Kernel Fuzzer for Xen Project (KF/x) - Hypervisor-based fuzzing using Xen VM forking, VMI & AFL
  ☆473Updated last year
• S2E / s2e
  S2E: A platform for multi-path program analysis with selective symbolic execution.
  ☆491Updated this week
• nyx-fuzz / libxdc
  The fastest Intel-PT decoder for fuzzing
  ☆375Updated last year
• HexHive / retrowrite
  RetroWrite -- Retrofitting compiler passes through binary rewriting
  ☆726Updated 5 months ago
• eurecom-s3 / symqemu
  SymQEMU: Compilation-based symbolic execution for binaries
  ☆357Updated 5 months ago
• sslab-gatech / winnie
  Winnie makes fuzzing Windows applications easy
  ☆564Updated 2 years ago
• nyx-fuzz / Nyx
  ☆257Updated 2 years ago
• bcoles / kasld
  Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux kernel base virtual address a…
  ☆456Updated last year
• GJDuck / e9patch
  A powerful static binary rewriting tool
  ☆1,052Updated 5 months ago
• GJDuck / e9afl
  AFL binary instrumentation
  ☆299Updated 8 months ago
• fuzzware-fuzzer / fuzzware
  Fuzzware's main repository. Start here to install.
  ☆349Updated 2 months ago
• RUB-SysSec / kAFL
  Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
  ☆585Updated 6 years ago
• uds-se / FormatFuzzer
  FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs.
  ☆429Updated 4 months ago
• googleprojectzero / SockFuzzer
  ☆442Updated last year
• googleprojectzero / TinyInst
  A lightweight dynamic instrumentation library
  ☆1,280Updated 6 months ago
• RUB-SysSec / redqueen
  ☆389Updated 4 years ago
• SystemSecurityStorm / Awesome-Binary-Rewriting
  An awesome & curated list of binary rewriting papers
  ☆250Updated 3 years ago
• nautilus-fuzz / nautilus
  A grammar based feedback Fuzzer
  ☆452Updated last year
• eurecom-s3 / symcc
  SymCC: efficient compiler-based symbolic execution
  ☆839Updated 4 months ago
• strongcourage / fuzzing-corpus
  My fuzzing corpus
  ☆283Updated 5 years ago
• binsec / binsec
  BINSEC binary-level open-source platform
  ☆370Updated 2 months ago
• quarkslab / rewind
  Snapshot-based coverage-guided windows kernel fuzzer
  ☆320Updated 3 years ago
• bsauce / kernel-security-learning
  Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel…
  ☆722Updated last month
• AFLplusplus / Grammar-Mutator
  A grammar-based custom mutator for AFL++
  ☆259Updated last year
• trailofbits / polytracker
  An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
  ☆581Updated 5 months ago
• hgarrereyn / GraphFuzz
  GraphFuzz is an experimental framework for building structure-aware, library API fuzzers.
  ☆268Updated last year
• angr / cle
  CLE Loads Everything (at least, many binary formats!)
  ☆462Updated last week
• aemmitt-ns / radius2
  radius2 is a fast binary emulation and symbolic execution framework using radare2
  ☆616Updated 9 months ago
• AngoraFuzzer / libdft64
  libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)
  ☆260Updated 7 months ago
• googleprojectzero / Jackalope
  Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android
  ☆1,247Updated 2 weeks ago