0vercl0k/wtf

Health v2 · maintenance only

Adoption not part of the score

1793 stars · 154 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

wtf (what the fuzz) is a distributed, code-coverage guided, snapshot-based fuzzer for attacking user- and kernel-mode targets on Windows and Linux (experimental). It executes targets via the Bochs emulator, Windows Hypervisor Platform APIs, or KVM for speed.

Use cases

• fuzz a Windows kernel driver from a snapshot
• fuzz a file parser like IDA Pro or a game protocol
• find memory corruption bugs in closed-source binaries
• fuzz user-mode targets on Linux using KVM
• replay and fuzz a VM snapshot taken at an interesting code point

When to choose

• you have a VM snapshot of a Windows user- or kernel-mode target you want to fuzz
• you need coverage-guided fuzzing of closed-source binaries without source instrumentation
• you want fast execution via hypervisor/KVM or precise execution via Bochs

When to avoid

• you need to fuzz source-code projects where libFuzzer/AFL++ are simpler
• you need macOS or other non-Windows/non-Linux kernel targets
• you want a managed fuzzing service with a UI rather than a CLI tool

Facets

cli-tool · maturity active

fuzzing security benchmarking security penetration-testing reverse-engineering developer-tools windows cpp snapshot-fuzzer code-coverage-guided bochs hypervisor kvm kernel-fuzzing distributed-fuzzing linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="0vercl0k/wtf")