Hsuan-Fuzz: REST API Fuzzing by Coverage Level Guided Blackbox Testing

Architecture

Usage

package main

import (
    restAPI "github.com/iasthc/hsuan-fuzz/pkg/rest-api"
)

func main() {
    x, err := restAPI.New("OpenAPI.yaml", ".", true, true)
    if err != nil {
        panic(err)
    }
    x.Fuzz(true)
}

WIP ...

Credits

• Mutation strategy
  • dvyukov/go-fuzz
• Examples of OpenAPI parameter
  • danielgtaylor/apisprout