OneFuzz
Open-source fuzz testing platform
OneFuzz is a cross-platform free and open source fuzz testing framework by Microsoft. The software enables continuous developer-driven fuzz testing to identify weaknesses in computer software prior to release.
01Overview
OneFuzz is a self-hosted fuzzing-as-a-service platform that automates the detection of software bugs that could be security issues. It supports Windows and Linux.
Notable features include composable fuzzing workflows, built-in ensemble fuzzing, programmatic triage and result de-duplication, crash reporting notification callbacks, and on-demand live-debugging of found crashes. The command-line interface client is written in Python 3, and targets Python 3.7 and up.
Microsoft uses the OneFuzz testing framework to probe Edge, Windows and other products at the company. It replaced the previous Microsoft Security Risk Detection software testing mechanism.
The source code was released on September 18, 2020. It is licensed under MIT License and hosted on GitHub.
On August 31, 2023, it was announced that development would be coming to an end. On November 1, 2023, the GitHub project was archived.
Sources and credits
This article is adapted from the Wikipedia article “OneFuzz”, written by its contributors and licensed under CC BY-SA 4.0. Fathomly has changed the layout, removed citation markers, navigation and maintenance notices, and adjusted punctuation. This adapted version is shared under the same license. For references, see the original article.
Images, from Wikimedia Commons:
- OneFuzz logo.svg by https://github.com/Porges, MIT
Fathomly is not affiliated with or endorsed by the Wikimedia Foundation. Spotted a problem? Tell us.
