# Installer zzuf avec Homebrew, apt, dnf, MacPorts, Nix, pacman

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de zzuf pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:zzuf
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install zzuf
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install zzuf
```

  Preuve: MacPorts ports tree: security/zzuf/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- Debian apt (92%):

```sh
sudo apt install zzuf
```

  Preuve: Debian stable package indexes: zzuf from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install zzuf
```

  Preuve: Fedora Rawhide package metadata: zzuf from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#zzuf
```

  Preuve: nixpkgs package indexes: pkgs/by-name/zz/zzuf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S zzuf
```

  Preuve: Arch Linux sync databases: zzuf from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

## Faits du paquet

- **Clé du paquet:** brew:zzuf
- **Gestionnaire de paquets:** Homebrew
- **Version:** 0.15
- **Résumé source:** Transparent application input fuzzer
- **Page d'accueil:** <http://caca.zoy.org/wiki/zzuf>
- **Dépôt:** <https://github.com/samhocevar/zzuf>
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- zzat (alias)
- zzuf (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 0.15
## Historique du projet et usages

zzuf is Sam Hocevar's transparent application input fuzzer. It runs a target program while intercepting file and network operations, flips bits in input data deterministically, and reports crashes or other interesting behavior.

### Historique du projet

zzuf grew out of the mid-2000s security and QA fuzzing culture around media parsers, image viewers, web browsers, and command-line utilities that consumed untrusted files. The Caca Labs page describes the project as a multi-purpose fuzzer whose goal is to make input fuzzing easier and more automated rather than inventing fuzzing itself.

The project had public talks and downloadable material by 2007 and 2008, including FOSDEM 2007 and Hacker Space Festival 2008 slides linked from the project page. The same page records early tarball attachments from 2008 and later snapshots, while the current development home is GitHub.

The manual-page source documents the mature command-line model: zzuf can run one program many times, vary seeds and fuzzing ratios, limit time, memory, bytes, and crashes, fuzz stdin when no command is given, and use preload or copy modes depending on platform support.

### Historique d'adoption

zzuf's own site names several adoption signals: Goatse Security used it against third-party applications, Adobe security researchers used it to stress-test applications and libraries, and CERT's Basic Fuzzing Framework was based on zzuf. The Fuzzing Project FAQ also lists zzuf as a simple, basic fuzzing tool for random input modification.

Its broader adoption is the classic small security-tool pattern: package managers keep a reproducible CLI available even after newer coverage-guided fuzzers became dominant, because zzuf is still useful for quick black-box corruption tests and deterministic reproducers.

### Modes d'utilisation

Typical usage is to prefix a command with zzuf, set a seed or seed range, and choose a corruption ratio. If a run crashes, the same seed can reproduce the mutated input; simple tools such as cat or cp can then materialize the exact fuzzed file for debugging or regression tests.

The manual also supports batch testing behavior: multiple jobs, maximum crash counts, wall-clock and CPU limits, output byte limits, memory limits, include/exclude filters, protected byte ranges, and network-fuzzing filters. That made zzuf useful both as a one-off terminal tool and as a scriptable QA/security harness.

### Pourquoi les passionnés de paquets s'y intéressent

zzuf matters to package nerds because it is a compact Unix-style security tool with a long tail. It exposes a single memorable command, but underneath it depends on platform loader behavior, libc/file-operation interception, signal handling, and resource limits, which are exactly the details package maintainers have to preserve across operating systems.

It also captures a pre-AFL era of fuzzing in package form: deterministic random mutation, no source instrumentation, easy shell integration, and enough knobs to turn a simple idea into a practical crash-finding workflow.

### Chronologie

- 2007: The project page links FOSDEM 2007 zzuf presentation slides.
- 2008: The project page links Hacker Space Festival 2008 slides and records early zzuf tarball attachments.
- 2010: The Caca Labs attachment list records later zzuf and Mac OS X snapshot tarballs.
- 2015-01-06: The bundled manual page source is dated 2015-01-06.
- 2015-06-09: The Caca Labs zzuf page records its last modification by Sam Hocevar.

### Related projects

- Related projects and tools include CERT Basic Fuzzing Framework, american fuzzy lop, libFuzzer, honggfuzz, radamsa, Valgrind, AddressSanitizer, media players, image viewers, web browsers, objdump, and other parser-heavy targets for black-box fuzzing.

### Sources

- <http://caca.zoy.org/wiki/zzuf>
- <https://fuzzing-project.org/faq.html>
- <https://github.com/samhocevar/zzuf>
- <https://raw.githubusercontent.com/samhocevar/zzuf/master/README.md>
- <https://raw.githubusercontent.com/samhocevar/zzuf/master/doc/zzuf.1.in>


## Notes de sécurité

narrow executable package without higher-risk signals.

- **Risque Geiger:** vert / faible
- narrow executable package without higher-risk signals

## Autres enregistrements de gestionnaires de paquets

- Debian apt - zzuf - 0.15-5+b1: normalized package name match | Debian stable package indexes: zzuf from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | transparent application fuzzer | https://caca.zoy.org/wiki/zzuf
- Nix - zzuf: normalized package name match | nixpkgs package indexes: pkgs/by-name/zz/zzuf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - zzuf - 0.15-2build3: normalized package name match | Ubuntu 24.04 LTS package indexes: zzuf from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | transparent application fuzzer | https://caca.zoy.org/wiki/zzuf
- dnf - zzuf - 0.15-27.fc45: normalized package name match | Fedora Rawhide package metadata: zzuf from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Transparent application input fuzzer | http://sam.zoy.org/zzuf/
- pacman - zzuf - 0.15-3: normalized package name match | Arch Linux sync databases: zzuf from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Transparent application input fuzzer | https://github.com/samhocevar/zzuf
- MacPorts - zzuf: normalized package name match | MacPorts ports tree: security/zzuf/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/zzuf.yml](https://github.com/mxcl/pkgdb/blob/main/combined/zzuf.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
