american fuzzy lop
Description: a powerful fuzzy tool
a detailed description is at the end of the report
version: (2.52b)
website: http://lcamtuf.coredump.cx/afl/
usage : for example
CC=/path/to/afl/afl-gcc ./configure
$ make clean all
license: Apache License, Version 2.0.
Similar tools: other fuzzers
install:
make
sudo make install

American Fuzzy Lop is a brute-force fuzzer coupled with an exceedingly simple
but rock-solid instrumentation-guided genetic algorithm. It uses a modified
form of edge coverage to effortlessly pick up subtle, local-scale changes to
program control flow.

Simplifying a bit, the overall algorithm can be summed up as:

1) Load user-supplied initial test cases into the queue,

2) Take next input file from the queue,

3) Attempt to trim the test case to the smallest size that doesn't alter
the measured behavior of the program,

4) Repeatedly mutate the file using a balanced and well-researched variety
of traditional fuzzing strategies,

5) If any of the generated mutations resulted in a new state transition
recorded by the instrumentation, add mutated output as a new entry in the
queue.

6) Go to 2.