Software:OneFuzz
 | |
| Other names | Project OneFuzz |
|---|---|
| Developer(s) | Microsoft |
| Initial release | September 18, 2020 |
| Final release | 8.9.0
/ October 9, 2023 |
| Repository | github |
| Written in | Rust, Python |
| Operating system | Windows, Linux |
| Platform | Cross-platform |
| Type | Fuzzer |
| License | MIT License |
| Website | www |
OneFuzz is a cross-platform free and open source fuzz testing framework by Microsoft.[1] The software enables continuous developer-driven fuzz testing to identify weaknesses in computer software prior to release.[2]
Overview
OneFuzz is a self-hosted fuzzing-as-a-service platform that automates the detection of software bugs that could be security issues.[1] It supports Windows and Linux.[2]
Notable features include composable fuzzing workflows, built-in ensemble fuzzing, programmatic triage and result de-duplication, crash reporting notification callbacks, and on-demand live-debugging of found crashes.[3][2] The command-line interface client is written in Python 3, and targets Python 3.7 and up.[4]
Microsoft uses the OneFuzz testing framework to probe Edge, Windows and other products at the company.[1] It replaced the previous Microsoft Security Risk Detection software testing mechanism.[2]
The source code was released on September 18, 2020.[1] It is licensed under MIT License and hosted on GitHub.[5]
On August 31, 2023, it was announced that development would be coming to an end. On November 1, 2023, the GitHub project was archived.[5]
See also
References
- ↑ 1.0 1.1 1.2 1.3 "Microsoft: Windows 10 is hardened with these fuzzing security tools – now they're open source". September 15, 2020. https://www.zdnet.com/article/microsoft-windows-10-is-hardened-with-these-fuzzing-security-tools-now-theyre-open-source/.
- ↑ 2.0 2.1 2.2 2.3 "Microsoft open-sources fuzzing test framework". September 17, 2020. https://www.infoworld.com/article/3575600/microsoft-open-sources-fuzzing-test-framework.html.
- ↑ "Microsoft's Security Group Open Sources Fuzzing Framework for Azure". September 22, 2020. https://adtmag.com/articles/2020/09/22/onefuzz-released-to-open-source.aspx.
- ↑ "OneFuzz- Microsoft Open Source Fuzzing Platform". September 19, 2020. https://hackersonlineclub.com/onefuzz-microsoft-open-source-fuzzing-platform/.
- ↑ 5.0 5.1 "GitHub - microsoft/onefuzz: A self-hosted Fuzzing-As-A-Service platform". November 1, 2023. https://github.com/microsoft/onefuzz.
External links
- on GitHub
- Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale
 |  |
