from Hacker News

Ask HN: Any Good Fuzzer for gRPC?

by TheBigRoomXXL on 3/22/24, 6:32 AM with 5 comments

I have been using Schemathesis (https://github.com/schemathesis/schemathesis) for some time to test REST APIs and I have found it amazing. I love the ways it find unexpected bugs and it really help me have more confidence in my systems.I also love how it integrate directly with pytest but that's more of a cherry on the cake.

But now I am working with GRPC service I can't find anything similar. The few solutions I found are closed source and necessitate to integrate with 3rd party platforms.I found that strange as GRPC as RPC seem perfect for fuzzing.

Did I miss a great tool that you use?

by dmitry_dygalo on 3/22/24, 7:57 AM
I am not aware of any tools like that, but eventually, I plan to add support for gRPC fuzzing to Schemathesis. There were already some discussions and it is more or less clear how to move forward. See https://github.com/schemathesis/schemathesis/discussions/190...
by Jensson on 3/22/24, 12:39 PM
Have you tried Googles grpc fuzzer? Not sure if the open source version is easy to use, but I used a fuzzer library when I worked at Google so they have good fuzzers themselves, but could potentially be hard to build or run or adapt to your codebase.
https://github.com/google/oss-fuzz/blob/master/projects/grpc...