OneFuzz

A self-hosted Fuzzing-As-A-Service platform

Project OneFuzz enables continuous developer-driven fuzzing to proactivelyharden software prior to release. With a singlecommand, which can be baked intoCICD, developers can launchfuzz jobs from a few virtual machines to thousands of cores.

Build Status

Features

Composable fuzzing workflows: Open source allows users to onboard their ownfuzzers, swap instrumentation, and manage seed inputs.
Built-in ensemble fuzzing: By default, fuzzers work as a team to share strengths,swapping inputs of interest between fuzzing technologies.
Programmatic triage and result de-duplication: It provides unique flaw cases thatalways reproduce.
On-demand live-debugging of found crashes: It lets you summon a live debuggingsession on-demand or from your build system.
Observable and Debug-able: Transparent design allows introspection into everystage.
Fuzz on Windows and Linux: Multi-platform by design. Fuzz using your own OSbuild, kernel, or nested hypervisor.
Crash reporting notification callbacks: Including Azure DevOps WorkItems and Microsoft Teamsmessages

For information, check out some of our guides:

Are you a Microsoft employee interested in fuzzing? Join us on Teams at Fuzzing @ Microsoft.

Contributing

This project welcomes contributions and suggestions. Most contributions requireyou to agree to a Contributor License Agreement (CLA) declaring that you havethe right to, and actually do, grant us the rights to use your contribution.For details, visit https://cla.microsoft.com.

When you submit a pull request, a CLA-bot will automatically determine whetheryou need to provide a CLA and decorate the PR appropriately (e.g., label,comment). Simply follow the instructions provided by the bot. You will onlyneed to do this once across all repositories using our CLA.

This project has adopted the Microsoft Open Source Code of Conduct.For more information see the Code of Conduct FAQor contact [email protected] with anyadditional questions or comments.

Data Collection

The software may collect information about you and your use of the software andsend it to Microsoft. Microsoft may use this information to provide servicesand improve our products and services. You may turn off the telemetry asdescribed in therepository.There are also some features in the software that may enable you and Microsoftto collect data from users of your applications. If you use these features, youmust comply with applicable law, including providing appropriate notices tousers of your applications together with a copy of Microsoft's privacystatement. Our privacy statement is located athttps://go.microsoft.com/fwlink/?LinkID=824704. You can learn more about datacollection and use in the help documentation and our privacy statement. Youruse of the software operates as your consent to these practices.

For more information: