libfuzzer vs afl.rs

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

WorkOS - The modern identity platform for B2B SaaS

The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

workos.com

featured

libfuzzer		afl.rs
	Project
1	Mentions	2
196	Stars	1,568
3.6%	Growth	1.3%
4.8	Activity	9.1
about 1 month ago	Latest Commit	9 days ago
C++	Language	Rust
Apache License 2.0	License	Apache License 2.0

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

libfuzzer

Posts with mentions or reviews of libfuzzer. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-04-11.

[release] Fazi - a drop-in replacement for libfuzzer
5 projects | /r/rust | 11 Apr 2022

Evaluate usage in Rust targets similar to https://github.com/rust-fuzz/libfuzzer (this is possible, just need to look at how this uses libfuzzer)

afl.rs

Posts with mentions or reviews of afl.rs. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-08-22.

[Gitoxide in July]: `git-config` release candidate and `cargo` slow-start
2 projects | /r/rust | 22 Aug 2022

I had the same experience with pomsky, setting up cargo fuzz is simple and well worth it! I also use afl.rs, which was able to find a stack exhaustion bug that cargo fuzz didn't find.
LibAFL - write fuzzers that outperform libfuzzer and afl, completely in Rust
4 projects | /r/rust | 3 Jan 2022

afl.rs provides a convenient tool to fuzz with afl++, will it be updated to leverage libafl or are the goals incompatible / is the target of libafl different?

What are some alternatives?

When comparing libfuzzer and afl.rs you can also consider the following projects:

sharpfuzz - AFL-based fuzz testing for .NET

quickcheck - Automated property based testing for Rust (with shrinking).

wtf - wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

proptest - Hypothesis-like property testing for Rust

fazi - drop-in replacement for libfuzzer

Clippy - A bunch of lints to catch common mistakes and improve your Rust code. Book: https://doc.rust-lang.org/clippy/

Sloth - Sloth 🦥 is a coverage guided fuzzing framework for fuzzing Android Native libraries that makes use of libFuzzer and QEMU user-mode emulation

rFmt

bolero - property testing and verification front-end for Rust

semantic-rs

ManuFuzzer - Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM

polish - Testing Framework for Rust