Skip to main content

Ctrl+K

Fandango 1.2 is now available! Check out the release notes for details.

Fuzzing with Fandango

About Fandango

About Fandango
Release Notes
Fandango FAQ
Contributing to Fandango

First Steps

Documentation Conventions
Installing Fandango
A First Fandango Spec
Invoking Fandango
Fuzzing with Fandango
Some Fuzzing Strategies

Hands-On

Hands-On: Fuzzing a Protocol End to End

Advanced Input Generation

Shaping Inputs with Constraints
The Fandango Shell
Data Generators and Fakers
Regular Expressions
Complex Input Structures
Accessing Input Elements
Converting ANTLR and Other Input Specs
Covering Specs and Code
Case Study: ISO 8601 Date + Time

Generating Binary Inputs

Generating Binary Inputs
Bits and Bit Fields
Data Converters
Case Study: PNG
Case Study: GIF
Case Study: MP3

Checking Responses

Parsing Strings
Checking Outputs

Testing Protocols

Testing Protocols
Customizing Party Communication
Case Study: FTP
Case Study: DNS

Hatching Specs

Hatching Specs
Fandango Style Guide

Fandango Reference

Fandango Reference
Installing Fandango
Fandango Command Reference
Fandango Language Reference
Fandango Standard Library
Derivation Tree Reference
Python API Reference
FandangoParty Reference
Fandango File Locations
Fandango Language Server

Repository
Open issue

Search

Ctrl+K

By José Antonio Zamudio Amaya, Valentin Huber, Alexander Liggesmeyer, Marius Smytzek, and Andreas Zeller

© Copyright 2024-2026 CISPA Helmholtz Center for Information Security (www.cispa.de). All Rights Reserved..