Table 1 Fuzzer comparison table.

From: A directed greybox fuzzer for windows applications

Fuzzer

Platform

Fitness metrics

Key features

Target Programs

WinDGF

Windows

Path Distance,

Key-block coverage

Hybrid Synergistic

Analysis, Dual-mode

Quantitative Assessment, GUI

Idle-state Bypass

XnView, IrfanView,

7-Zip, etc.

WinAFL5

Windows

Code coverage

Windows Port of

AFL Framework

XnView, IrfanView,

7-Zip, etc.

Winnie6

Windows

Code coverage

Harness Synthesis,

Fork-like Process

Cloning

XnView, 7-Zip, etc.

WinFuzz14

Windows

Code coverage

Target-embedded

Snapshot Restoration

Tar, IrfanView, etc.

SpotFuzzer12

Windows

Code coverage

SpotInstr Static

Instrumentation Engine

7-Zip, Notepad++,

etc.

SiCsFuzzer13

Windows

Code coverage

Sparse Code

Sampling, Warm-up

Phase Optimization

XnView, IrfanView,

7-Zip, etc.

BuzzFuzz7

Unix-like

Input Byte Influence

coverage

Taint-guided

Mutation Strategy

Swfdec, MuPDF

FishFuzz8

Unix-like

Multi-distance

metric

Sanitizer-guided

Vulnerability Prioritization

Tcpdump, Tiff2pdf,

etc.

DeFuzz9

Unix-like

Path distance

Deep Learning-

based Target Prediction

LibMing

UAFL11

Unix-like

State transition

coverage

Typestate-guided

Fuzzing, Specialized

Memory Error Detection

Readelf, Lrzip, etc.

AFLGo2

Unix-like

Path distance

AFL-based Directed

Fuzzing

LibXML2, LibMing,

Binutils, etc.

WAFLGO15

Unix-like

Critical code

coverage, Multi-targets

dstance

Critical Code-guided

Input Generation,

Lightweight Multi-

target Optimization

Libjpeg, Libtiff, etc.

FunFuzz16

Unix-like

Function

significance (FS)

FS-aware Energy

Scheduling, Lazy FS

Computation

Magma Test Set

RegionFuzz17

Unix-like

Sensitive/Complex/

Deep/Rare-reach

Code Metrics

Vulnerability Region

Awareness Mechanism

LAVA-M, libxml2,

etc.