Ross ROSS = Recommend OSS · open-source software intelligence for agents

google/honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based) observed · 2026-08-28

github.com/google/honggfuzz · homepage · C · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

62/100

  • Activity 88
  • Release rhythm 8
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 4136
  • days_rel: n/a
  • days_push: 75
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

3376 stars · 535 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Honggfuzz is a security-oriented, feedback-driven evolutionary fuzzer that uses software and hardware code coverage to discover bugs in binaries. It is multi-process and multi-threaded, supports persistent in-process fuzzing at up to 1M iterations/sec, and runs on Linux, macOS, Android, NetBSD, FreeBSD, and Windows (Cygwin).

Use cases

  • fuzz a C/C++ binary to find memory corruption bugs
  • find security vulnerabilities in a parser or file format library
  • run coverage-guided fuzzing with hardware tracing on Intel CPUs
  • fuzz an API in persistent mode for maximum throughput
  • build a corpus automatically from an empty input directory
  • detect hidden crashes and hijacked signals in a target process
  • fuzz OpenSSL, Apache, or other open-source servers for CVEs

When to choose

  • you need a fast, multi-core coverage-guided fuzzer for C/C++ targets
  • you want hardware-based feedback via Intel BTS/PT
  • you need persistent-mode fuzzing with very high iteration rates
  • you want a fuzzer that can start from an empty corpus
  • you need broad OS support including BSD and Android

When to avoid

  • you fuzz JavaScript or managed-language code without a native harness
  • you prefer a fuzzer with a rich web dashboard or cloud orchestration
  • you need Windows support beyond Cygwin
  • you want a fuzzer with extensive structured-input grammar support out of the box

Facets

cli-tool · maturity active

fuzzing security vulnerability-scanning testing security developer-tools testing penetration-testing windows cli cpp c coverage-guided-fuzzing persistent-fuzzing evolutionary-fuzzing ptrace intel-pt security-testing c linux macos android

2 sources

Member repositories

RepositoryRoleHealth v2
google/honggfuzzmain62

For agents

markdown · JSON · MCP: product_card(name="google/honggfuzz")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem