---
id: 2390
title: "ProtoFuzz: A Protobuf Fuzzer"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2016/05/18/protofuzz-a-protobuf-fuzzer/"
published_at: "2016-05-18T11:50:57Z"
tags: ["open-source", "fuzzing", "deserialization", "python", "serialization", "tools", "security-testing", "protobuf", "trail-of-bits", "testing-tools"]
phying_url: "https://phying.com/item/2390"
lang: en
---

# ProtoFuzz: A Protobuf Fuzzer

## Summary

Trail of Bits released ProtoFuzz, a Python 3 library generating fuzzed protobuf messages from .proto definitions: valid structures filled with malicious values to attack code behind deserialization.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2016-05-18T11:50:57Z
- **Original:** https://blog.trailofbits.com/2016/05/18/protofuzz-a-protobuf-fuzzer/
- **Phying News:** https://phying.com/item/2390