An API fuzzer I've been building for several years now: https://github.com/Endava/cats

I was just reading about these whacky German's yesterday, after investigating a particularly undescriptive (and still available 20 years after it's last update) PKG in pacman. It was the tool/framework/concept that these guys used in the mid to late 90s to fuzz those 2k+ bugs out of Netscape Navigator like they mention in the article. Rather ingenious that it's fuzzing technique allowed them to not only isolate bugs without really knowing what behavior triggered it, but it would automatically narrow it down to the specific line of code at fault. I'm not really doing it justice, even less so because I can't remember the name of that tool/framework/technique.... Definitely made me rethink my understanding of how under lying systems architecture and code actually interact, and what a "bug" truly is. So anyway, tl;dr, a coincidence happened to me.

It's pretty cool how the site looks gorgeous and even has working menus without any JavaScript.

There's also Fuzzing 101: https://github.com/antonio-morales/Fuzzing101

My 5 cents on fuzzing compilers, and, actually, finding issues [1], also share another work we have done using black box/pentesting security techniques, including fuzzing in Fireblocks [2].

[1] https://www.coinfabrik.com/blog/why-the-fuzz-about-fuzzing-c...

[2] https://www.coinfabrik.com/blog/fireblocks-api-black-box-rev...

Great content, excited to see the book grow :)