oss-fuzz-gen and fuzz4all
These are competitors: both use LLMs to generate fuzzing inputs and test cases, but OSS-Fuzz-Gen is specifically integrated with Google's OSS-Fuzz infrastructure while Fuzz4All is a language-agnostic fuzzing framework, so users would typically choose one approach based on whether they need OSS-Fuzz integration or broader language support.
About oss-fuzz-gen
google/oss-fuzz-gen
LLM powered fuzzing via OSS-Fuzz.
Generates fuzz targets across C/C++, Java, and Python by prompting multiple LLMs (Vertex AI, Gemini, GPT-4) to synthesize harnesses, then evaluates them against OSS-Fuzz infrastructure using metrics like compilability, crash detection, and coverage gain versus human-written targets. The framework discovered 30+ real vulnerabilities including CVE-2024-9143 in OpenSSL, demonstrating LLM-generated targets can achieve up to 29% additional line coverage on production projects.
About fuzz4all
fuzz4all/fuzz4all
🌌️Fuzz4All: Universal Fuzzing with Large Language Models
Related comparisons
Scores updated daily from GitHub, PyPI, and npm data. How scores work