google/oss-fuzz

More in security

Ranked by stars gained in the last 24 hours.

• 

  YuJunZhiXue/dsh-purge

  DeepSeek Harness 破甲：让所有模型都能破甲，不同模型可换不同提示词；默认提示词面向国模「小码酱」。Jailbreak for every model — swap prompts per model. 求 Star 收藏 ⭐ 如要二开，请查看署名要求部分

  JavaScript11.8k+565/d5% growthsecurity
• 

  ifixai-ai/iFixAi

  Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.

  Python36.5k+376/dsecurity
• 

  interplains/zero-breach

  Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

  Python766+188/d34% growthsecurity
• 

  guillaumemeyer/watermarks-remover

  A privacy-first app that strips AI watermarks from content you own.

  Python25.2k+172/dsecurityai-dev-tools
• 

  notinferred/keypaste

  A KeePass-compatible password and secrets manager for people who work with AI agents.

  C#597+146/d34% growthsecurity
• 

  NVIDIA/SkillSpector

  Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

  Python22.9k+132/dsecurity
• 

  google/mantis

  A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.

  Python2.7k+121/d5% growthai-agentssecurity
• 

  NationalSecurityAgency/ghidra

  Ghidra is a software reverse engineering (SRE) framework

  Java95.3k+119/dsecurity

Star history

Weekly, from GitHub's stargazers history, over a 30-day window.

Competes with

Repositories in the same collection, of a comparable size (within 5× in stars) and from a different owner, that were discussed in the same threads. Same-owner projects are excluded because they are usually pieces of the same tool, not rivals. A repository also stays out if the two never met in a discussion.

• facebook/zstd28.1k

  Mentioned together in 1 thread · on the same trending list 4 rounds.

  Compare side by side

Shares topics with

Repositories that share at least two topics with this one: most shared topics first, then stars gained in the last 24 hours.

• 

  google/clusterfuzz

  Scalable fuzzing infrastructure.

  Shared: fuzzing, security, stability, vulnerabilities

  Python5.6k0/dsecurity
• 

  google/syzkaller

  syzkaller is an unsupervised coverage-guided kernel fuzzer

  Shared: fuzz-testing, fuzzing, security

  Go6.4k+2/dsecurity
• 

  anchore/grype

  A vulnerability scanner for container images and filesystems

  Shared: security, vulnerabilities

  Go13.1k+15/d0% growthsecurity
• 

  theorem-labs/oss-verify-proofs

  Theorem statements about OSS-Fuzz fuzz targets as compiled RISC-V binaries, and machine-checked Rocq proofs of them

  Shared: fuzzing, oss-fuzz

  Rocq Prover176+14/d9% growthscience
• 

  future-architect/vuls

  Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

  Shared: security, vulnerabilities

  Go12.3k+5/dsecurity

1. 20 Jun 2024Hacker News threadread the thread
2. 30 Sep 2026Entered our index· 832 days later
3. 30 Sep 2026First seen on GitHub Trending · rank 10· same day

Stars: 12.7k when it entered our index, 12.8k on the last capture we hold (28 Oct 2026), so +132 in that span. That span is our own measurement window, not a claim about what happened before it.

Its most recent thread before Trending is more than 90 days older than that day, so the two are not the same story and we do not claim lead time.

We hold 58 mentions for it, the oldest dated 13 Oct 2016 and the first written into our database on 28 Oct 2026. Thread dates come from the source, not from when we fetched them.

58 items so far: 58 on Hacker News, 0 on Reddit; 0 in the last 7 days, 0 in the last 30. Checked by the pipeline, which re-scans trending repositories every few hours. Last check 10 hr ago.

• A buffer overflow in the XNU kernelHNcomment · by zX41ZdbW · 20 Jun 2024

  https://github.com/google/oss-fuzz-gen

• AI Search: The Bitter-Er LessonHNcomment · by skybrian · 15 Jun 2024

  The article seems rather hand-wavy and over-confident about predicting the future, but it seems worth trying. "Search" is a generalization of "generate and test" and rejection sampling. It's classic AI. Back before the dot-com era, I took an intro to AI course and we learned about writing programs to do searches in Prolog. The speed depends on how long it takes to generate a candidate, how long i…

• The xz attack shell scriptHNcomment · by sp332 · 2 Apr 2024

  The ifunc part looked more legitimate, it was used to switch between optimized implementations of CRC. So that part was in the git repo. https://github.com/google/oss-fuzz/pull/10667

• Xzbot: Notes, honeypot, and exploit demo for the xz backdoorHNcomment · by jsmith99 · 1 Apr 2024

  The attacker changed the projects contact details at oss fuzz (an automated detection tool). There’s an interesting discussion as to whether that would have picked up the vulnerability https://github.com/google/oss-fuzz/issues/11760

• What we know about the xz Utils backdoor that almost infected the worldHNcomment · by 4bpp · 1 Apr 2024

  The interest in OSS-Fuzz was because it was used to monitor libxz, and so one of the necessary subgoals was to trick its maintainers into exempting libxz from a check that may have caught the backdoor, or at least drawn attention to it for unrelated reasons: https://github.com/google/oss-fuzz/pull/10667

Reddit (fetched when this page is opened)

A Reddit search for github.com/google/oss-fuzz runs while this page is rendered, at most once every 6 hours per repository. What it finds is stored in our database (25 posts per fetch, at most 200 repositories a day), so the numbers on this site can be reproduced later. Reddit's feed has no scores or comment counts, so none are shown.

5 newest of 7 posts found, as of 21:12 (BKK).

• Question For The Proton TeamRedditby /u/CuriousPomegranate89 · 13 Mar 2023
• Google supports Monero in new OSS security initiativeRedditby /u/MagicalVagina · 18 May 2022
• How to use fuzzing to test an arbitrary programming language?Redditby /u/jubnzv · 19 Jan 2021
• Boosting Fuzzer Efficiency: An Information Theoretic PerspectiveRedditby /u/marcelboehme · 31 Oct 2020
• Quantitative data on the safety of RustRedditby /u/Shnatsel · 10 Feb 2020