syzkaller is an unsupervised, coverage-guided kernel fuzzer.
It generates and mutates sequences of system calls, executes them on virtual machines or physical devices, and uses the resulting code coverage to guide subsequent tests. The software maintains a persistent corpus of useful programs to explore increasingly deep kernel paths.
When syzkaller detects a crash, it attempts to reproduce the fault and minimise the program responsible. It deduplicates crashes, stores raw logs and symbolised reports, and can produce standalone C reproducers. Statistics, coverage and crash information are available through a web interface.
This is free and open source software.
Key Features
- Coverage-guided generation and mutation of system-call sequences.
- Unsupervised fuzzing with persistent corpus and crash storage.
- Starts, restarts and monitors worker virtual machines.
- Detects kernel crashes, hangs, lockups and lost test-machine connections.
- Automatically reproduces crashes and minimises triggering programs.
- Generates syzkaller and standalone C reproducers.
- Deduplicates crashes and stores raw logs and symbolised reports.
- Uses declarative system-call descriptions which can be extended.
- Web interface displays execution statistics, coverage and crashes.
- Connects multiple manager instances to exchange programs and reproducers.
- Supports virtual machines, Android devices and selected physical hardware.
- Supports Linux, FreeBSD, Fuchsia, gVisor, NetBSD, OpenBSD and Windows.
- Supports cross-architecture and cross-operating-system fuzzing.
Website: github.com/google/syzkaller
Support:
Developer: Google and contributors
License: Apache License 2.0
syzkaller is written in Go. Learn Go with our recommended free books and free tutorials.
Related Software
| Vulnerability Analysis Tools | |
|---|---|
| sqlmap | Penetration testing tool |
| BeEF | The Browser Exploitation Framework |
| pocsuite3 | Remote vulnerability testing framework |
| AFL++ | Security-oriented fuzzer |
| Wapiti | "Black-box" vulnerability scanner |
| jSQL Injection | Automatic SQL database injection |
| sif | Pentesting (recon/exploitation) suite |
| XSSer | Detect, exploit and report XSS vulnerabilities |
| Kanha | Web-app pentesting suite |
| simple fuzzer | A fuzzer with two network modes of operation |
| Doona | Fork of the Bruteforce Exploit Detector Tool |
Read our verdict in the software roundup.
 Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |
Please read our Comment Policy before commenting.