OneFuzz
Other names | Project OneFuzz |
---|---|
Developer(s) | Microsoft |
Initial release | September 18, 2020 |
Final release | 8.9.0
/ October 9, 2023 |
Fuzzer | |
License | MIT License |
Website | www |
OneFuzz is a cross-platform
Overview
OneFuzz is a
Notable features include composable fuzzing workflows, built-in ensemble fuzzing, programmatic triage and result de-duplication, crash reporting notification callbacks, and on-demand live-debugging of found crashes.[3][2] The command-line interface client is written in Python 3, and targets Python 3.7 and up.[4]
Microsoft uses the OneFuzz testing framework to probe Edge, Windows and other products at the company.[1] It replaced the previous Microsoft Security Risk Detection software testing mechanism.[2]
The source code was released on September 18, 2020.[1] It is licensed under MIT License and hosted on GitHub.[5]
On August 31, 2023, it was announced that development would be coming to an end. On November 1, 2023, the GitHub project was archived.[5]
See also
- Test automation
- Random testing
- American fuzzy lop (fuzzer)
- DynamoRIO
- Pin (computer program)
References
- ^ a b c d "Microsoft: Windows 10 is hardened with these fuzzing security tools – now they're open source". ZDNet. September 15, 2020.
- ^ a b c d "Microsoft open-sources fuzzing test framework". InfoWorld. September 17, 2020.
- ^ "Microsoft's Security Group Open Sources Fuzzing Framework for Azure". ADTmag.com. September 22, 2020.
- ^ "OneFuzz- Microsoft Open Source Fuzzing Platform". hackersonlineclub.com. September 19, 2020.
- ^ a b "GitHub - microsoft/onefuzz: A self-hosted Fuzzing-As-A-Service platform". November 1, 2023 – via GitHub.