Misplaced Pages

OneFuzz is a cross-platform free and open source fuzz testing framework by Microsoft. The software enables continuous developer-driven fuzz testing to identify weaknesses in computer software prior to release.

Overview

OneFuzz is a self-hosted fuzzing-as-a-service platform that automates the detection of software bugs that could be security issues. It supports Windows and Linux.

Notable features include composable fuzzing workflows, built-in ensemble fuzzing, programmatic triage and result de-duplication, crash reporting notification callbacks, and on-demand live-debugging of found crashes. The command-line interface client is written in Python 3, and targets Python 3.7 and up.

Microsoft uses the OneFuzz testing framework to probe Edge, Windows and other products at the company. It replaced the previous Microsoft Security Risk Detection software testing mechanism.

The source code was released on September 18, 2020. It is licensed under MIT License and hosted on GitHub.

On August 31, 2023, it was announced that development would be coming to an end. On November 1, 2023, the GitHub project was archived.

See also

• Test automation
• Random testing
• American fuzzy lop (fuzzer)
• DynamoRIO
• Pin (computer program)

References

1. ^ "Microsoft: Windows 10 is hardened with these fuzzing security tools – now they're open source". ZDNet. September 15, 2020.
2. ^ "Microsoft open-sources fuzzing test framework". InfoWorld. September 17, 2020.
3. "Microsoft's Security Group Open Sources Fuzzing Framework for Azure". ADTmag.com. September 22, 2020.
4. "OneFuzz- Microsoft Open Source Fuzzing Platform". hackersonlineclub.com. September 19, 2020.
5. ^ "GitHub - microsoft/onefuzz: A self-hosted Fuzzing-As-A-Service platform". November 1, 2023 – via GitHub.

External links

• Official website
• onefuzz on GitHub
• Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale

v t e Microsoft free and open-source software (FOSS)
Overview	Microsoft and open source Shared Source Initiative
Software	Applications 3D Movie Maker Atom Conference XP Family.Show File Manager Open Live Writer Microsoft PowerToys Terminal Windows Calculator Windows Console Windows Package Manager WorldWide Telescope XML Notepad Video games Allegiance Programming languages Bosque C# Dafny F# F* GW-BASIC IronPython IronRuby Lean P Power Fx PowerShell Project Verona Q# Small Basic Online TypeScript Visual Basic Frameworks, development tools .NET .NET Framework .NET Gadgeteer .NET MAUI .NET Micro Framework AirSim ASP.NET ASP.NET AJAX ASP.NET Core ASP.NET MVC ASP.NET Razor ASP.NET Web Forms Avalonia Babylon.js BitFunnel Blazor C++/WinRT CCF ChakraCore CLR Profiler Dapr DeepSpeed DiskSpd Dryad Dynamic Language Runtime eBPF on Windows Electron Entity Framework Fluent Design System Fluid Framework Infer.NET LightGBM Managed Extensibility Framework Microsoft Automatic Graph Layout Microsoft C++ Standard Library Microsoft Cognitive Toolkit Microsoft Design Language Microsoft Detours Microsoft Enterprise Library Microsoft SEAL mimalloc Mixed Reality Toolkit ML.NET mod_mono Mono MonoDevelop MSBuild MsQuic Neural Network Intelligence npm NuGet OneFuzz Open Management Infrastructure Open Neural Network Exchange Open Service Mesh Open XML SDK Orleans Playwright ProcDump ProcMon Python Tools for Visual Studio R Tools for Visual Studio RecursiveExtractor Roslyn Sandcastle SignalR StyleCop SVNBridge T2 Temporal Prover Text Template Transformation Toolkit TLA+ Toolbox U-Prove vcpkg Virtual File System for Git Voldemort VoTT Vowpal Wabbit Windows App SDK Windows Communication Foundation Windows Driver Frameworks KMDF UMDF Windows Forms Windows Presentation Foundation Windows Template Library Windows UI Library WinJS WinObjC WiX XDP for Windows XSP xUnit.net Z3 Theorem Prover Operating systems MS-DOS (v1.25, v2.0 & v4.0) Barrelfish SONiC Azure Linux Other ChronoZoom Extensible Storage Engine FlexWiki FourQ Gollum Project Mu ReactiveX SILK TLAPS TPM 2.0 Reference Implementation WikiBhasha
Licenses	Microsoft Public License Microsoft Reciprocal License
Forges	CodePlex GitHub
Related	.NET Foundation F# Software Foundation Microsoft Open Specification Promise Open Letter to Hobbyists Open Source Security Foundation Outercurve Foundation
Category

v t e Microsoft development tools
Development environments	Visual Studio Code Express Team System Profiler Tools for Applications Tools for Office Others Blend Expression Web FxCop GW-BASIC MACRO-80 Macro Assembler MSBuild Pascal QuickBASIC QBasic QuickC Robotics Developer Studio Roslyn SharePoint Designer FrontPage Small Basic WebMatrix Windows App SDK Windows App Studio Windows SDK CLR Profiler ILAsm Native Image Generator WinDiff XAMLPad
Languages	Dynamics AX BASIC Visual Basic legacy VB.NET VBA VBScript Bosque Visual C++ C++/CX C++/CLI Managed C++ C++/WinRT C# C/AL Dafny Dexterity F# F* Visual FoxPro Java J++ J# JavaScript TypeScript JScript IronPython IronRuby Lean P Power Fx PowerShell Project Verona Q# Small Basic VPL XAML
APIs and frameworks	Native Windows API Silverlight XNA DirectX Managed DirectX UWP Xbox Development Kit Windows Installer WinUI .NET ASP.NET Core AJAX Dynamic Data MVC Razor Web Forms ADO.NET Entity Framework MAUI CardSpace Communication Foundation Identity Foundation LINQ Presentation Foundation Workflow Foundation Device drivers WDK WDF KMDF UMDF Windows HLK WDM
Database	SQL Server Express Compact Management Studio Business Intelligence Development Studio MSDE SQL services Analysis Reporting Integration Notification Other Visual FoxPro Microsoft Access Access Database Engine Extensible Storage Engine
Source control	Visual SourceSafe Team Foundation Version Control
Testing and debugging	CodeView OneFuzz Playwright Script Debugger WinDbg xUnit.net
Delivery	Active Setup ClickOnce npm NuGet vcpkg Web Platform Installer Windows Installer WiX Windows Package Manager Microsoft Store
Category

v t e Microsoft Research (MSR)
Main projects	Languages, compilers Bartok Bosque Cω F* Lean P Project Verona Phoenix Polyphonic C# SecPAL Distributed–grid computing BitVault Confidential Consortium Framework DeepSpeed Orleans Internet, networking AjaxView Avalanche Conference XP Gazelle HoneyMonkey Penny Black Wallop WikiBhasha Other projects Automatic Graph Layout Cognitive Toolkit Digits Holoportation IllumiRoom Image Composite Editor Infer.NET LightGBM LiveStation MyLifeBits Neural Network Intelligence NodeXL OneFuzz PhotoDNA SEAL SLAM T2 Temporal Prover WorldWide Telescope Z3 Theorem Prover Operating systems Barrelfish HomeOS Midori Singularity Verve APIs Accelerator Dryad Joins mimalloc SXM Launched as products C# Comic Chat Detours F# Sideshow PixelSense (TouchLight) SenseCam ClearType Group Shot Allegiance TrueSkill Songsmith Xbox Kinect
MSR Labs applied research	Live Labs Current Pivot Seadragon Deep Zoom Discontinued Deepfish Listas Live Clipboard Photosynth Volta FUSE Labs Docs.com Kodu Other labs Academic Search adCenter Labs Office Labs
Category

This article about software created, produced or developed by Microsoft is a stub. You can help Misplaced Pages by expanding it.

• v
• t
• e

• Free and open-source software
• Free software programmed in Rust
• Free software testing tools
• Security testing tools
• Microsoft free software
• Microsoft Research
• Software using the MIT license
• 2020 software
• Microsoft software stubs