Welcome to Awesome Fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

Contents

• Books
• Courses
  • Free
  • Paid
• Videos
  • NYU Poly Course videos
  • Conference talks and tutorials
• Tutorials and Blogs
• Tools
  • Cloud Fuzzers
  • File Format Fuzzers
  • Network Protocol Fuzzers
  • Browser Fuzzing
  • Taint Analysis
  • Symbolic Execution SAT and SMT Solvers
  • Essential Tools
• Vulnerable Applications
• Anti-Fuzzing
• Directed-Fuzzing
• Contributing

Awesome Fuzzing Resources

Books

Books on fuzzing

• Fuzzing: Brute Force Vulnerability Discovery by Michael Sutton, Adam Greene, Pedram Amini.

• Fuzzing for Software Security Testing and Quality Assurance by Ari Takanen, Charles Miller, Jared D Demott and Atte Kettunen.

• Open Source Fuzzing Tools by by Gadi Evron and Noam Rathaus.

• Gray Hat Python by Justin Seitz.

• The Fuzzing Book by Andreas Zeller, Rahul Gopinath, Marcel Böhme, Gordon Fraser, and Christian Holler.

Note: Chapter(s) in the following books are dedicated to fuzzing.

• The Shellcoder's Handbook: Discovering and Exploiting Security Holes ( Chapter 15 ) by Chris Anley, Dave Aitel, David Litchfield and others.

• iOS Hacker's Handbook - Chapter 1 Charles Miller, Dino DaiZovi, Dion Blazakis, Ralf-Philip Weinmann, and Stefan Esser.

• IDA Pro - The IDA Pro Book: The Unofficial Guide to the World's Most Popular Disassembler

Courses

Courses/Training videos on fuzzing

Free

NYU Poly ( see videos for more ) - Made available freely by Dan Guido.

Samclass.info ( check projects section and chapter 17 ) - by Sam.

Modern Binary Exploitation ( RPISEC ) - Chapter 15 - by RPISEC.

Offensive Computer Security - Week 6 - by W. Owen Redwood and Prof. Xiuwen Liu.

Paid

Offensive Security, Cracking The Perimeter ( CTP ) and Advanced Windows Exploitation ( AWE )

SANS 660/760 Advanced Exploit Development for Penetration Testers

Exodus Intelligence - Vulnerability development master class

Ada Logics - Applied Source Code Fuzzing

FuzzingLabs Academy (C/C++, Rust, Go fuzzing)

Signal Labs - Vulnerability Research & Fuzzing

Videos

Videos talking about fuzzing techniques, tools and best practices

NYU Poly Course videos

Fuzzing 101 (Part 1) - by Mike Zusman.

Fuzzing 101 (Part 2) - by Mike Zusman.

Fuzzing 101 (2009) - by Mike Zusman.

Fuzzing - Software Security Course on Coursera - by University of Maryland.

Conference talks and tutorials

Attacking Antivirus Software's Kernel Driver

Fuzzing the Windows Kernel - OffensiveCon 2020

Youtube Playlist of various fuzzing talks and presentations - Lots of good content in these videos.

Browser bug hunting - Memoirs of a last man standing - by Atte Kettunen

Coverage-based Greybox Fuzzing as Markov Chain

DerbyCon 2016: Fuzzing basics...or how to break software

Fuzz Theory - by Brandon Falk

Tutorials and Blogs

Tutorials and blogs which explain methodology, techniques and best practices of fuzzing

ARMored CoreSight: Towards Efficient Binary-only Fuzzing

Fuzzing Microsoft's RDP Client using Virtual Channels: Overview & Methodology

Fuzzing Closed Source PDF Viewers

Fuzzing Image Parsing in Windows, Part One: Color Profiles

Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory

Fuzzing Image Parsing in Windows, Part Three: RAW and HEIF

Fuzzing the Office Ecosystem

Effective File Format Fuzzing - Mateusz “j00ru” Jurczyk @ Black Hat Europe 2016, London

A year of Windows kernel font fuzzing Part-1 the results - Amazing article by Google's Project Zero, describing what it takes to do fuzzing and create fuzzers.

A year of Windows kernel font fuzzing Part-2 the techniques - Amazing article by Google's Project Zero, describing what it takes to do fuzzing and create fuzzers.

Interesting bugs and resources at fuzzing project - by fuzzing-project.org.

Fuzzing workflows; a fuzz job from start to finish - by @BrandonPrry.

A gentle introduction to fuzzing C++ code with AFL and libFuzzer - by Jeff Trull.

A 15 minute introduction to fuzzing - by folks at MWR Security.

Note: Folks at fuzzing.info has done a great job of collecting some awesome links, I'm not going to duplicate their work. I will add papers missed by them and from 2015 and 2016. Fuzzing Papers - by fuzzing.info

Fuzzing Blogs and Books - by fuzzing.info

Root Cause Analysis of the Crash during Fuzzing - by Corelan Team.

Root cause analysis of integer flow - by Corelan Team.

Creating custom peach fuzzer publishers - by Open Security Research

7 Things to Consider Before Fuzzing a Large Open Source Project - by Emily Ratliff.

From Fuzzing to Exploit:

From fuzzing to 0-day - by Harold Rodriguez(@superkojiman).

From crash to exploit - by Corelan Team.

Peach Fuzzer related tutorials

Peach Fuzzer Introductionh

Fuzzing with Peach Part 1 - by Jason Kratzer of corelan team

Fuzzing with Peach Part 2 - by Jason Kratzer of corelan team.

Auto generation of Peach pit files/fuzzers - by Frédéric Guihéry, Georges Bossert.

AFL Fuzzer related tutorials

Creating a fuzzing harness for FoxitReader 9.7 ConvertToPDF Function

[50 CVEs in 50 Days: Fuzzing Adobe Reader](https://research.che