{"repo":"srlabs/substrate-runtime-fuzzer","free":true,"listed":false,"github":"https://github.com/srlabs/substrate-runtime-fuzzer","clone":"git clone https://github.com/srlabs/substrate-runtime-fuzzer.git","description":"A fuzzing harness for Substrate-based blockchains.","language":"Rust","stars":34,"topics":["blockchain","fuzzing","kusama","polkadot","substrate"],"license":"Apache-2.0","category":"blockchain-web3","readme_excerpt":"Substrate Runtime Fuzzer substrate-runtime-fuzzer is a substrate runtime fuzzing harness continuously developed at SRLabs since 2020. It has been used as a part of our continuous audit process for Parity as well as many parachains in the Polkadot and Kusama ecosystem. As a part of the Substrate Builders Program, this fuzzer has been used on over 30 different projects, finding dozens of critical vulnerabilities in the process. How do I use it? Here are the steps to launch substrate-runtime-fuzzer against the solochain template runtime: You can use the the -j n flag to run $n$ jobs in parallel. We also recommend using --no-honggfuzz if running for a long time with many cores, as honggfuzz will have a tendency to slow things down and bloat the corpus in this situation. SKIP WASM BUILD=1 will reduce compilation time and the binary's size. We are not fuzzing the wasm runtime. What is \"ziggy\"? ziggy is a fuzzer management tool written by the team at SRLabs. It will spawn multiple different coverage-guided fuzzers with the right configuration and regularly minimize the corpus and share it between instances. How do I use this on my substrate-based runtime? The first step is creating a project and adding the same dependencies as this project. Then, you can modify the solochain-template-runtime dependency to your own runtime (either as a local path or as a git URL). Finally you should add a genesis configuration to make sure the fuzzer can reach as much of the code as possible. You can","default_branch":null,"files":null,"tree":[],"storefront":"/r/srlabs","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/srlabs/substrate-runtime-fuzzer/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}