Fuzzing Java in OSS-Fuzz

• PIT

  1 1,622 8.3 Java

  State of the art mutation testing system for the JVM

Another great tool is Pitest for mutation testing on the JVM (make coverage more meaningful) https://github.com/hcoles/pitest

• jazzer

  11 906 9.2 Java

  Discontinued Coverage-guided, in-process fuzzing for the JVM

  

One of the authors of Jazzer here. Feel free to ask any questions regarding Jazzer (https://github.com/CodeIntelligenceTesting/jazzer) or how to integrate Java/JVM projects into OSS-Fuzz.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• junit-quickcheck

  5 951 7.3 Java

  Property-based testing, JUnit-style

If you want an easy way to have better mutation coverage, check out property based testing. Eg junit-quickcheck for Java.

https://github.com/pholser/junit-quickcheck

• libfuzzer-workshop

  2 1,216 2.6 C++

  Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.

That depends on the language you want to fuzz. A good general introduction and hands-on "course" for C/C++ is https://github.com/Dor1s/libfuzzer-workshop. If you prefer Java and just want to get a feeling for how concrete fuzz targets can look like, take a look at the Jazzer examples at https://github.com/CodeIntelligenceTesting/jazzer/tree/main/....

Suggest a related project