I have created a white-box fuzzer by extending the Crest.

Now, I'm looking for a test suite (a set of c programs with known vulnerabilities) to test the functionality of my tool.

where i can find such benchmarks?

1 Answer 1


Have you tried the Metasploitable? https://community.rapid7.com/community/metasploit/blog/2009/03/22/vmware-virtual-pc-and-fdcc-images

Also, you could try making your own applications, they aren't difficult to make:

#include <stdio.h>

void call_me()

int main(int argc, char **argv)
    char in[20];

    return 0;

Something like the above is all it takes for application vulnerabilities.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .