Skip to content
STIMSMITH

Grey-Box Fuzzing

Technique
First seen 6/19/2026
Last seen 8/5/2026
Evidence 20 chunks

NEIGHBORHOOD

No graph connections found for this entity yet. It may appear in future ingestion runs.

explore full graph →

RELATIONSHIPS

10 connections
JQF ← implements 95% 2e
JQF is a greybox fuzzing framework that instruments JVM bytecode for collecting code coverage.
Code Coverage uses → 95% 2e
Greybox fuzzing uses code coverage as feedback to guide mutation of test inputs.
WhisperFuzz compares with → 90% 2e
WhisperFuzz is compared with grey-box fuzzing approaches that cannot locate timing vulnerability root causes.
Black-Box Fuzzing extends → 90% 2e
Greybox fuzzing lies between whitebox and blackbox fuzzing, extending blackbox with lightweight analysis.
Coverage Feedback uses → 95% 1e
Grey-box fuzzing receives architectural-level coverage feedback.
AFL ← implements 98% 1e
AFL is classified as a grey-box fuzzer.
performance counter uses → 90% 1e
Grey-box fuzzing approaches use performance counters to identify potential timing vulnerabilities.
Coverage-based Greybox Fuzzing ← extends 100% 1e
CGF is a specialization of greybox fuzzing that uses code coverage as feedback.
Coverage-Guided Mutation-Based Fuzzing implements → 95% 1e
Greybox fuzzing is another name for coverage-guided mutation-based fuzzing.
SiliFuzz: Fuzzing CPUs by Proxy ← compares with 85% 1e
The paper contrasts SiliFuzz with greybox fuzzing applied to RTL models.