View source for Fuzzing

This is a first attempt to collect data on free software [http://en.wikipedia.org/wiki/Fuzzing fuzzing] tools.

==Tools==
* List of
** http://www.infosecinstitute.com/blog/2005/12/fuzzers-ultimate-list.html
** http://www.hacksafe.com.au/blog/category/fuzz-testing/
** http://lcamtuf.coredump.cx/
** http://www.krakowlabs.com/lof.html
** https://www.peerlyst.com/posts/resource-open-source-fuzzers-list
* [http://lcamtuf.coredump.cx/afl/ American Fuzzy Lop]
* [http://sourceforge.net/projects/taof/ The Art Of Fuzzing] and http://www.theartoffuzzing.com
* [http://sourceforge.net/projects/jbrofuzz JBroFuzz]
* [http://www.digitaldwarf.be/products.html Digital Dwarf products]
* [http://peachfuzz.sourceforge.net/ PeachFuzz]
* [http://www.packetfactory.net/Projects/ISIC/ IP Stack Integrity Checker]
* [http://www.ee.oulu.fi/research/ouspg/protos/ PROTOS] - Security Testing of Protocol Implementations
* [http://www.immunitysec.com/resources-freesoftware.shtml SPIKE & Sharefuzz]
* [http://aconole.brad-x.com/programs/sfuzz.html sfuzz]
* As Debian packages:
** [http://fuzz.sourceforge.net/ fuzz] - stress-test programs by giving them random input
** [http://sam.zoy.org/zzuf/ zzuf] - transparent application input fuzzer
* Debian packages, not sure if they automate fuzzing but they can be useful
** bfbtester - Brute Force Binary Tester
** irpas - Internetwork Routing Protocol Attack Suite
** mozilla-livehttpheaders - Adds information about the HTTP headers to Iceweasel and Iceape
** netsed - The network packet altering stream editor
** [http://www.secdev.org/projects/scapy/ python-scapy] - Packet generator/sniffer and network scanner/discovery
** [http://www.immunitysec.com/resources-freesoftware.shtml spikeproxy] - Web application security testing proxy
** [http://www.dwheeler.com/flawfinder/ flawfinder] - examines source code and looks for security weaknesses
** [http://fusil.hachoir.org/trac/wiki/ fusil] - Fuzzing program to test applications
** inguma - Open source penetration testing toolkit
** wapiti - Web application vulnerability scanner