nowfound

Work · alternatives · 2026

24 alternatives to Differential Fuzzing of Cryptographic Libraries

Cryptofuzz Cryptofuzz is a project that fuzzes cryptographic libraries and compares their output in order to find implementation discrepancies. It’s quite effective and has already found a lo…

Differential Fuzzing of Cryptographic Libraries is a testing tool for developers and security researchers who work with cryptographic code. It compares how different cryptographic libraries handle the same inputs to… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Differential Fuzzing of Cryptographic Libraries launched in 2019; newer entries below may have overtaken it.

  1. 1

    Free cross-platform deniable encryption cryptoarchiver - GitHub - zorggomat/FractalCryptGUI: Free cross-platform deniable encryption cryptoarchiver

    2021 · github.com · its alternatives →

  2. 2

    Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free! - matusf/openapi-fuzzer

    2021 · github.com · its alternatives →

  3. 3

    Hazmat ECC arithmetic for Cryptography.io . Contribute to tuxxy/hazmat-math development by creating an account on GitHub.

    2017 · github.com · its alternatives →

  4. 4

    A Fully Homomorphic Encryption Brainfuck virtual machine - f-prime/arcanevm

    2019 · github.com · its alternatives →

  5. 5

    This is a project I made to learn more about crypto. I've also written a [post](https://vaktibabat.github.io/posts/ecurvechat/) that explains all the crypto concepts and algorithms used in the project, and how I implemented them. I'd be very glad for any feedback about both the code and the post :)

    2024 · github.com · its alternatives →

  6. 6

    I wrote this tool during an internship at Narf Industries in 2023. It's a REPL that allows for quickly developing, testing, and fuzzing for HTTP request smuggling attack payloads. I started the internship having never worked with web servers, and have now found over 100 HTTP implementation bugs. I attribute this mostly to the ease of experimentation in the Garden. REPL-oriented fuzzing is just a really good interface for finding parsing bugs. It's pretty neat to able to run a differential fuzzer, categorize and display all the discovered discrepancies, then let a human pick through them and…

    2024 · github.com · its alternatives →

  7. 7

    I recently dipped my toes into bug bounty hunting and finding security flaws in web applications. As a friend of UNIX shells I was building a repertoire of command line tools to make and analyze HTTP requests. Fortunately there are already many suitable tools like curl, jq, different fuzzers and some really nice tools for specific tasks by Tom Hudson [1]. However, I disliked that the existing fuzzers were monoliths where I had no easy way of creating custom behavior or analyses. They commonly do a multitude of things: Create multiple requests using one or more wordlist, sending the request,…

    2024 · github.com · its alternatives →

  8. 8

    A sensible secret management toolkit (and Go library) for admins and programmers - domodwyer/cryptic

    2016 · github.com · its alternatives →

  9. 9

    Rust crypto w/ zero default deps: BLAKE3, Ed25519/X25519, hashes, MACs, KDFs, AEADs, and checksums w/ full SIMD/ASM acceleration - GitHub - loadingalias/rscrypto: Rust crypto w/ zero default deps: BLAKE3, Ed25519/X25519, hashes, MACs, KDFs, AEADs, and checksums w/ full SIMD/ASM acceleration

    Jun 2026 · github.com · its alternatives →

  10. 10

    An Erlang library for generating adversarial network conditions for QAing distributed applications/systems on a single Linux box. - lostcolony/damocles

    2015 · github.com · its alternatives →

  11. 11

    I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…

    2025 · github.com · its alternatives →

  12. 12

    A Go library that implements Consistent Hashing and Consistent Hashing With Bounded Loads. - lafikl/consistent

    2017 · github.com · its alternatives →

  13. 13

    The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm - DOSAYGO-STUDIO/rain

    2024 · github.com · its alternatives →

  14. 14

    This brand new secure diffchecker. It's supports text/code diff upto 25k lines with character level diff all in browser. Supports one of the best inhouse diff merge feature. https://diffchecker.dev/ Now, add list diff - to compare two lists and show unique, common and diff between two lists. https://diffchecker.dev/list/ Add json diff, supports semantic json difference. https://diffchecker.dev/json/ With consistent, clean, minimal UI elements. Would you switch from other websites. Please checkout and provide feedback.

    Nov 2025 · diffchecker.dev · its alternatives →

  15. 15

    A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdict engine (Truthimatics Public Version) for secure, auditable code execution. - Division-36/Z-Jail

    Jul 2026 · github.com · its alternatives →

  16. 16AM

    I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!

    2025 · prompt-injector.blueprintlab.io · its alternatives →

  17. 17

    My little fuzzing framework inspired by grinder. Contribute to susperius/PyFuzz2 development by creating an account on GitHub.

    2015 · github.com · its alternatives →

  18. 18

    I've created cppmatch, a lightweight, header-only C++ library that brings Rust-inspired pattern matching and error handling to C++. It tries to imitate the functionality of the questionmark (?) operator in C++ by using a macro that uses the gcc extension https://gcc.gnu.org/onlinedocs/gcc/Statement-Exprs.html This allows to create exceptionless code with non-intrusive error-as-value that unlike Exceptions, makes it clear which kinds of error a function can generate and forces you to handle (or ignore) them. The ? operator translates to *expect* To handle the errors I…

    2025 · github.com · its alternatives →

  19. 19

    A generator library for concise, unambiguous and URL-safe UUIDs - lithammer/shortuuid

    2015 · github.com · its alternatives →

  20. 20

    I’ve been experimenting with structured logic as a way to frame search spaces — not in an academic way, just as a personal project. I wanted to know: what happens if you initialize a brute-force run with a simple equality like xy = x / y? Not as a filter, just as a logical ignition point. I used AES-256-CBC encrypted files with UUID passwords and tested against a 1 million UUID space. It cracked it in under 40 seconds. Then I scaled it to a 1 billion UUID range, and it still found the key without issue. This isn’t a crypto tool, and I’m not trying to solve any cryptographic problems.…

    2025 · github.com · its alternatives →

  21. 21CS
  22. 22
  23. 23

    Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb

    2022 · github.com · its alternatives →

  24. 24

    Contribute to skorotkiewicz/algebruh development by creating an account on GitHub.

    Aug 2026 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →