Skip to main content

Ctrl+K

This is a beta version of fuzzingbook.org, currently in development. See the classic site for resources.

The Fuzzing Book

Introduction

Tours through the Book
Introduction to Software Testing

Lexical Fuzzing

Fuzzing: Breaking Things with Random Inputs
Code Coverage
Mutation-Based Fuzzing
Greybox Fuzzing
Search-Based Fuzzing
Mutation Analysis

Syntactical Fuzzing

Fuzzing with Grammars
Efficient Grammar Fuzzing
Grammar Coverage
Parsing Inputs
Probabilistic Grammar Fuzzing
Fuzzing with Generators
Greybox Fuzzing with Grammars
Reducing Failure-Inducing Inputs

Semantical Fuzzing

Fuzzing with Constraints
Mining Input Grammars
Tracking Information Flow
Concolic Fuzzing
Symbolic Fuzzing
Mining Function Specifications

Domain-Specific Fuzzing

Testing Configurations
Fuzzing APIs
Carving Unit Tests
Testing Compilers
Testing Web Applications
Testing Graphical User Interfaces

Managing Fuzzing

Fuzzing in the Large
When To Stop Fuzzing

Appendices

Academic Prototyping
Prototyping with Python
Error Handling
Timer
Timeout
Class Diagrams
Railroad Diagrams
Control Flow Graph

About This Book

Fuzzingbook Release Notes
Using Fuzzingbook Code in your own Programs
Guide for Authors

Repository
Open issue

Search

Ctrl+K

By Andreas Zeller, Rahul Gopinath, Marcel Böhme, Gordon Fraser, and Christian Holler

© Copyright 2021-2025 CISPA Helmholtz Center for Information Security (www.cispa.de); © Copyright 2018-2020 Saarland University, authors, and contributors. All Rights Reserved.