radamsa vs honggfuzz

radamsa

By akihe

honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based) (by google)

Fuzzing Security C

Source Code

honggfuzz.dev

Suggest alternative

Edit details

Our great sponsors

WorkOS - The modern identity platform for B2B SaaS

InfluxDB - Power Real-Time Data Analytics at Scale

SaaSHub - Software Alternatives and Reviews

Our great sponsors

radamsa		honggfuzz
	Project
5	Mentions	5
-	Stars	2,979
-	Growth	1.0%
-	Activity	7.1
-	Latest Commit	about 1 month ago
	Language	C
-	License	Apache License 2.0

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

radamsa

Posts with mentions or reviews of radamsa. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-07-22.

How to fuzz java code with jazzar?
7 projects | dev.to | 22 Jul 2022

Ex Radmasa
Radamsa – test case generator for robustness testing
1 project | news.ycombinator.com | 15 Feb 2022
Anyone knows open source mutator support regex?
2 projects | /r/fuzzing | 29 Jul 2021

I used to use radamsa to make my own fuzzer, but it does not support regex to generate datas.
What Is Fuzz Testing?
5 projects | news.ycombinator.com | 7 Apr 2021

At simplest and most straight forward level fuzz testing is pretty simple to get started with. Collect some input(API calls, files, etc.), pass it to fuzzer(for example radamsa[0]), throw it at program and observe...
Ofc, depending on system collecting input and sending it to system might be bit more complicated. Hardest part is often the observing and finding that an error happens.
Not that this gets you full coverage, for more complex things like protocols something custom that takes lot more effort is probably needed.
[0] https://gitlab.com/akihe/radamsa
Radamsa: A general-purpose black-box fuzzer
1 project | news.ycombinator.com | 9 Jan 2021

honggfuzz

Posts with mentions or reviews of honggfuzz. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-12-03.

FuzzTest: a C++ testing framework for writing and executing fuzz tests, property-based tests executed using coverage-guided fuzzing under the hood
5 projects | /r/cpp | 3 Dec 2022
How to fuzz java code with jazzar?
7 projects | dev.to | 22 Jul 2022

Ex ( AFL, WinAFL, HonggFuzz, LibFuzzer, Jazzer )
Question about getting coverage stats in real time using dynamorio
1 project | /r/fuzzing | 6 May 2022

I once used Hongfuzz as a code-coverage tool, see: https://github.com/google/honggfuzz/tree/master/socketfuzzer
60x speed-up of Linux “perf”
7 projects | news.ycombinator.com | 9 Sep 2021

Here's the libbfd-based code in case anyone would like to port it, it's basically addr2line.
https://github.com/google/honggfuzz/blob/master/linux/bfd.c
Resurse C/C++?
8 projects | /r/programare | 8 Apr 2021

What are some alternatives?

When comparing radamsa and honggfuzz you can also consider the following projects:

onefuzz - A self-hosted Fuzzing-As-A-Service platform

AFLplusplus - The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

beacon-fuzz - Differential Fuzzer for Ethereum 2.0

American Fuzzy Lop - american fuzzy lop - a security-oriented fuzzer

winafl - A fork of AFL for fuzzing Windows binaries

build-your-own-x - 🤓 Build your own (insert technology here) [Moved to: https://github.com/codecrafters-io/build-your-own-x]

doubleback - Doubleback provides round-trip parsing and printing of 64-bit double-precision floating-point numbers using the Ryu algorithm implemented in multiple programming languages. Doubleback is biased towards "human-friendly" output which round-trips consistently between binary and decimal.

Catch - A modern, C++-native, test framework for unit-tests, TDD and BDD - using C++14, C++17 and later (C++11 support is in v2.x branch, and C++03 on the Catch1.x branch)

cryptofuzz - Fuzzing cryptographic libraries. Magic bug printer go brrrr.

build-your-own-x - Master programming by recreating your favorite technologies from scratch.

jazzer - Coverage-guided, in-process fuzzing for the JVM