Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
ClusterFuzz is an advanced fuzzing platform designed to identify security vulnerabilities and stability problems within software applications. Utilized by Google for all its products, it also serves as the fuzzing backend for OSS-Fuzz. This infrastructure offers a plethora of features that facilitate the integration of fuzzing into the development lifecycle of software projects. It includes fully automated processes for bug filing, triage, and resolution across different issue trackers. Moreover, it supports various coverage-guided fuzzing engines to achieve optimal outcomes through techniques like ensemble fuzzing and diverse fuzzing strategies. The platform provides detailed statistics for evaluating fuzzer efficiency and tracking crash rates. Its user-friendly web interface simplifies management tasks and crash examinations, while it also accommodates multiple authentication providers via Firebase. Additionally, ClusterFuzz supports black-box fuzzing, minimizes test cases, and employs regression identification through bisection techniques, making it a comprehensive solution for software testing. The versatility and robustness of ClusterFuzz truly enhance the software development process.
Description
Wapiti is a tool designed for scanning vulnerabilities in web applications. It provides the capability to assess the security of both websites and web applications effectively. By conducting "black-box" scans, it avoids delving into the source code and instead focuses on crawling through the web pages of the deployed application, identifying scripts and forms that could be susceptible to data injection. After compiling a list of URLs, forms, and their associated inputs, Wapiti simulates a fuzzer by inserting various payloads to check for potential vulnerabilities in scripts. It also searches for files on the server that may pose risks. Wapiti is versatile, supporting attacks via both GET and POST HTTP methods, and handling multipart forms while being able to inject payloads into uploaded filenames. The tool raises alerts when it detects anomalies, such as server errors or timeouts. Moreover, Wapiti differentiates between permanent and reflected XSS vulnerabilities, providing users with detailed vulnerability reports that can be exported in multiple formats including HTML, XML, JSON, TXT, and CSV. This functionality makes Wapiti a comprehensive solution for web application security assessments.
API Access
Has API
No
API Access
Has API
No
Integrations
Drupal
No
Firebase
Yes
Google Chrome
No
Google OSS-Fuzz
Yes
Google Sheets
No
HTML
No
Honggfuzz
Yes
JSON
No
Jira
Yes
LibFuzzer
Yes
Integrations
Drupal
Yes
Firebase
No
Google Chrome
Yes
Google OSS-Fuzz
No
Google Sheets
Yes
HTML
Yes
Honggfuzz
No
JSON
Yes
Jira
No
LibFuzzer
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
Free
Free Trial
No
Free Version
Yes
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Country
United States
Website
google.github.io/clusterfuzz/
Vendor Details
Company Name
Wapiti
Website
wapiti-scanner.github.io