tamper-fuzzing

What problem does it solve?

Tamper-fuzzing automates exhaustive surface enumeration and mutation to reveal hidden weaknesses by running a convergence loop that relies on per-endpoint baselines and behavioral oracles.

Core Features & Use Cases

• Enumerates every reachable input unit (endpoints, forms, params, headers, cookies, JSON keys, GraphQL vars) and mutates them through a tamper matrix to surface findings only when a defined oracle fires.
• Maintains a cross-endpoint state ledger (surface.json, baselines.json, tampers.jsonl, findings.jsonl, dead_ends.jsonl) and rotates mutation classes each round to converge coverage.
• Enforces safety gates (scope gate, non-destructive defaults, rate limiting, and explicit ASK before destructive mutations) to prevent harmful actions.

Quick Start

Run a live-fire tamper convergence against a target by configuring a scope and executing the tamper loop to enumerate inputs and apply mutations until no untested pairs remain.