OneFuzz

Last updated
OneFuzz
Other namesProject OneFuzz
Developer Microsoft
Initial releaseSeptember 18, 2020;5 years ago (2020-09-18)
Final release
8.9.0 / October 9, 2023;2 years ago (2023-10-09)
Repository github.com/microsoft/onefuzz
Written in Rust, Python
Operating system Windows, Linux
Platform Cross-platform
Type Fuzzer
License MIT License
Website www.microsoft.com/en-us/research/project/project-onefuzz/

OneFuzz is a cross-platform free and open source fuzz testing framework by Microsoft. [1] The software enables continuous developer-driven fuzz testing to identify weaknesses in computer software prior to release. [2]

Contents

Overview

OneFuzz is a self-hosted fuzzing-as-a-service platform that automates the detection of software bugs that could be security issues. [1] It supports Windows and Linux. [2]

Notable features include composable fuzzing workflows, built-in ensemble fuzzing, programmatic triage and result de-duplication, crash reporting notification callbacks, and on-demand live-debugging of found crashes. [3] [2] The command-line interface client is written in Python 3, and targets Python 3.7 and up. [4]

Microsoft uses the OneFuzz testing framework to probe Edge, Windows and other products at the company. [1] It replaced the previous Microsoft Security Risk Detection software testing mechanism. [2]

The source code was released on September 18, 2020. [1] It is licensed under MIT License and hosted on GitHub. [5]

On August 31, 2023, it was announced that development would be coming to an end. On November 1, 2023, the GitHub project was archived. [5]

See also

References

  1. 1 2 3 4 "Microsoft: Windows 10 is hardened with these fuzzing security tools – now they're open source". ZDNet. September 15, 2020.
  2. 1 2 3 4 "Microsoft open-sources fuzzing test framework". InfoWorld. September 17, 2020.
  3. "Microsoft's Security Group Open Sources Fuzzing Framework for Azure". ADTmag.com. September 22, 2020.
  4. "OneFuzz- Microsoft Open Source Fuzzing Platform". hackersonlineclub.com. September 19, 2020.
  5. 1 2 "GitHub - microsoft/onefuzz: A self-hosted Fuzzing-As-A-Service platform". November 1, 2023 via GitHub.