EvoMaster vs Wfuzz
EvoMaster
github.comWfuzz
github.comSide by side
| Figure | EvoMaster | Wfuzz |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Fuzz Testing Software | 8.3 (#8) | 7.3 (#20) |
| Installation | The recommended install method is PyPI; the project also provides an uber-fat JAR and Docker distribution. | The project README gives pip installation and a Docker image command as installation options. |
| Purpose | EvoMaster automatically generates system-level tests through fuzzing for web and enterprise applications. | Wfuzz is a framework for automating web application security assessments and finding and exploiting web application vulnerabilities. |
| Support | The project directs users to GitHub issues and discussions for documentation and usage questions. | The project links to documentation and uses GitHub issues and pull requests for project activity. |
Plans
In their own words
EvoMaster
EvoMaster is a free, open-source tool that uses fuzzing to generate system-level tests for web and enterprise applications. It targets REST, GraphQL, and RPC APIs, including gRPC and Thrift. Black-box mode works with APIs in any programming language, while white-box mode analyzes JVM bytecode. Generated tests can be JUnit 4 or 5 in Java or Kotlin, or suites in Python or JavaScript. More than 30 oracles check issues including HTTP 500 responses, schema mismatches, BOLA, and SQL injection. White-box testing can analyze SQL and MongoDB interactions with PostgreSQL, MySQL, H2, and MongoDB support. Authentication accepts headers and cookies, including tokens or cookies obtained from a login endpoint. REST testing requires OpenAPI 2.0, 3.0, or 3.1. PyPI is the recommended installation route, with Docker and an uber-fat JAR also available. EvoMaster runs on Linux, macOS, Windows, and self-hosted environments, and integrates with GitHub Actions through a custom action.