Regularly updated reading list for core concepts required to exploit browsers

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read - 0xricksanchez/paper_collection

Fresh from Microsoft Research, the RESTLer fuzzer is a new REST fuzzing tool, it relies on a OpenAPI/Swagger specification to create and…

A self-hosted Fuzzing-As-A-Service platform. Contribute to microsoft/onefuzz development by creating an account on GitHub.

Wfuzz is a security tool to do fuzzing of web applications. It is modular and can be used to discover and exploit web application vulnerabilities. This makes the tool useful for both developers as security professionals.

Microsoft researchers open source the first stateful REST API fuzzing tool designed to make cloud services more reliable and secure. Learn how RESTler automatically tests and finds security bugs through their REST APIs.

A structure-aware JSON fuzzer

This is a review of SFTPfuzzer with features, strenghts and weaknesses, and comparisons with other alternatives for SFTPfuzzer.

The property-based testing library for Python. Contribute to HypothesisWorks/hypothesis development by creating an account on GitHub.

Google has found thousands of security vulnerabilities and other bugs using Fuzzing. Now we are introducing the Atheris fuzzing engine.

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. - microsoft/restler...

A collection of widely-fuzzed targets. Contribute to strongcourage/fuzzing-targets development by creating an account on GitHub.