OneFuzz is a cross-platform
free and open source fuzz testing framework by
Microsoft.
The software enables
continuous developer-driven fuzz testing to identify weaknesses in
computer software prior to release.
Overview
OneFuzz is a
self-hosted fuzzing-as-a-service platform that automates the detection of
software bug
A software bug is an error, flaw or fault in the design, development, or operation of computer software that causes it to produce an incorrect or unexpected result, or to behave in unintended ways. The process of finding and correcting bugs i ...
s that could be
security issues.
It supports
Windows and
Linux.
Notable features include composable fuzzing workflows, built-in ensemble fuzzing, programmatic triage and result de-duplication, crash reporting notification callbacks, and on-demand live-debugging of found crashes.
The
command-line interface
A command-line interpreter or command-line processor uses a command-line interface (CLI) to receive commands from a user in the form of lines of text. This provides a means of setting parameters for the environment, invoking executables and pro ...
client is written in
Python 3, and targets Python 3.7 and up.
Microsoft uses the OneFuzz testing framework to probe
Edge, Windows and other products at the company.
It replaced the previous ''Microsoft Security Risk Detection'' software testing mechanism.
The
source code was released on September 18, 2020.
It is licensed under
MIT License and hosted on
GitHub.
See also
*
Test automation
*
Random testing
*
American fuzzy lop (fuzzer)
The American Fuzzy Lop is a rabbit breed recognized by the American Rabbit Breeders Association (ARBA). It is similar in appearance to a Holland Lop. However, the American Fuzzy Lop is a wool breed and will have wool similar to the Angora breeds a ...
*
DynamoRIO
*
Pin (computer program)
References
External links
*
*
Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale
Free and open-source software
Free software programmed in Rust
Free software testing tools
Security testing tools
Microsoft free software
Microsoft Research
Software using the MIT license
2020 software
{{Microsoft-software-stub