# wuppiefuzz mit Homebrew installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für wuppiefuzz in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:wuppiefuzz ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install wuppiefuzz ``` Evidenz: local Homebrew formula metadata ## Paketfakten - **Paketschlüssel:** brew:wuppiefuzz - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 1.6.0 - **Quellzusammenfassung:** Coverage-guided REST API fuzzer developed on top of LibAFL - **Homepage:** - **Repository:** - **Lizenz:** Apache-2.0 - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-06-25T20:42:36Z - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - wuppiefuzz (cli) - wuppiefuzz (Alias) ## Abhängigkeiten - z3 ## Build-Abhängigkeiten - cmake - pkgconf - rust ## Von macOS bereitgestellte Bibliotheken - sqlite ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 1.6.0 - Manager aktualisiert: 2026-06-25 - lokale Daten: OK - Upstream-Repository: https://github.com/TNO-S3/WuppieFuzz - Info: No cached GitHub release or tag data was available. ## Projektgeschichte und Nutzung WuppieFuzz is TNO's open-source, coverage-guided REST API fuzzer built on LibAFL. The project targets black-box, grey-box, and white-box testing and emphasizes ease of use, explainable findings, and modularity. ### Projektgeschichte The project is developed under the TNO-S3 GitHub organization and is implemented primarily in Rust. Its README presents WuppieFuzz as a practical REST API fuzzing tool, while its academic publication frames it as coverage-guided, stateful REST API fuzzing driven by OpenAPI specifications and REST-specific mutators. The tool's research context is modern API security. The TNO repository and 2025/2026 publication describe a workflow in which an OpenAPI specification seeds request sequences, LibAFL and REST-specific mutation explore behavior, and coverage measurements guide which request sequences are sent next to reach complex application states. ### Adoptionsgeschichte WuppieFuzz has moved beyond a repository-only release into security tooling visibility: its README lists media coverage, a ONE Conference e-magazine feature, an OpenAPI.tools listing, a Nordic APIs talk, and a Thoughtworks Technology Radar mention. The preferred citation points to the ICISSP 2026 proceedings, giving it both an open-source and research footprint. ### Wie es verwendet wird Users run WuppieFuzz against a target application and provide an OpenAPI specification so the fuzzer can generate and mutate requests. For coverage-guided setups, the README shows passing coverage configuration such as JaCoCo data for a Java target; the paper also describes harness automation and reports that help developers fix bugs. ### Warum Paket-Nerds sich dafür interessieren For security package collections, WuppieFuzz is notable because it brings LibAFL-style coverage-guided fuzzing into the REST API space instead of staying at the binary or library fuzzing layer. It sits near OpenAPI tooling, API security testing, Rust fuzzing infrastructure, and developer-friendly security automation. ### Zeitleiste - 2024: Project media coverage and conference visibility begin appearing in the upstream README. - 2025: TNO's publication record lists WuppieFuzz as a conference paper. - 2025-12-17: The WuppieFuzz paper is submitted to arXiv. - 2026: The README identifies WuppieFuzz v1.6.0 and cites the ICISSP 2026 proceedings. ### Related projects - WuppieFuzz is built on LibAFL and is comparable to other REST API fuzzers and API testing tools that consume OpenAPI specifications. The paper explicitly discusses black-box, grey-box, and white-box API fuzzing in relation to existing approaches such as EvoMaster. ### Quellen - - - ## Sicherheitshinweise Für wuppiefuzz wurde kein passendes lokales Secret-Handling-Manifest gefunden. Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: config.yaml ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** wuppiefuzz - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Verwandte Links - [Cloud CLI packages](https://pkg.so/de/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://pkg.so/de/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://pkg.so/de/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [z3](https://pkg.so/de/brew/z3/) - Runtime dependency declared by Homebrew. - [pkgconf](https://pkg.so/de/brew/pkgconf/) - Build dependency declared by Homebrew. - [cmake](https://pkg.so/de/brew/cmake/) - Build dependency declared by Homebrew. - [rust](https://pkg.so/de/brew/rust/) - Build dependency declared by Homebrew. - [h26forge](https://pkg.so/de/brew/h26forge/) - Shares pkgdb curated category or tags: cli, fuzzing, rust, security, security-testing. - [echidna](https://pkg.so/de/brew/echidna/) - Shares pkgdb curated category or tags: cli, fuzzing, security, security-testing. - [afl++](https://pkg.so/de/brew/afl/) - Shares pkgdb curated category or tags: cli, fuzzing, security, security-testing. - [ffuf](https://pkg.so/de/brew/ffuf/) - Shares pkgdb curated category or tags: cli, fuzzing, security. - [feroxbuster](https://pkg.so/de/brew/feroxbuster/) - Shares pkgdb curated category or tags: cli, rust, security. - [rustscan](https://pkg.so/de/brew/rustscan/) - Shares pkgdb curated category or tags: cli, rust, security. - [jwt-cli](https://pkg.so/de/brew/jwt-cli/) - Shares pkgdb curated category or tags: cli, rust, security. - [cargo-audit](https://pkg.so/de/brew/cargo-audit/) - Shares pkgdb curated category or tags: cli, rust, security. - [arjun](https://pkg.so/de/brew/arjun/) - Security-sensitive metadata or terminology overlaps. Shared terms: api, api-testing, cli, fuzzer, security. - [authoscope](https://pkg.so/de/brew/authoscope/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, rust, security, testing. ## Combined YAML source View the package source record on GitHub. [combined/wuppiefuzz.yml](https://github.com/mxcl/pkgdb/blob/main/combined/wuppiefuzz.yml) ## Quellen - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - cross-ecosystem install command graph