Jackalope

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1380 stars · 157 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Jackalope is a customizable, coverage-guided fuzzer for black-box binaries built on the TinyInst instrumentation library by Google Project Zero. It supports distributed fuzzing across machines, custom mutators including a grammar-based mutation engine, and runs on Windows, macOS, Linux, and Android.

Use cases

• fuzz a closed-source Windows binary for memory corruption bugs
• fuzz macOS applications without source code
• run a distributed fuzzing campaign across multiple machines
• write custom mutators for a proprietary file format
• grammar-based fuzzing of a parser accepting structured input
• fuzz an Android native library
• fuzz a Linux target built with SanitizerCoverage

When to choose

• you need to fuzz black-box binaries on Windows or macOS where few alternatives exist
• you want a fuzzer that is easy to customize with custom mutators, instrumentation, or sample delivery
• you need to parallelize fuzzing across threads or multiple machines
• you are doing vulnerability research on closed-source targets

When to avoid

• you have source code and just want a mature off-the-shelf fuzzer like AFL++ or libFuzzer
• you need advanced built-in mutation strategies out of the box
• you want a low-effort setup without writing or configuring custom components for unusual targets

Facets

library · maturity active

fuzzing security penetration-testing vulnerability-scanning security developer-tools testing windows cpp coverage-guided-fuzzing binary-fuzzer tinyinst black-box-fuzzing grammar-based-mutation distributed-fuzzing vulnerability-research macos linux android

Member repositories

For agents

markdown · JSON · MCP: product_card(name="googleprojectzero/Jackalope")