AI-powered Python fuzzer using LiteLLM and Atheris to automatically generate and execute fuzzing harnesses.
Project description
AtherisLiteLLM:
This project creates a LLM-assisted Python fuzzing harness generator designed to leverage large language models via LiteLLM to automatically build fuzzing harnesses for target Python functions and classes. It uses Google’s Atheris fuzzing engine to dynamically generate and test code, with the aim of uncovering bugs or vulnerabilities in software.
Workflow:
- Resolve API keys and model configurations.
- Clone repository from URL or verify existing local source directory.
- Discover and parse Python files for target functions and classes.
- (Optional) Filter targets by maintainability index using Radon.
- Concurrently generate harnesses via LiteLLM using extracted code context.
- Save and organize all valid harnesses into a structured, timestamped output directory.
Arguments:
-u,--url: Git URL to clone. Defaults to~/Downloadsif no--src-diris given.-s,--src-dir: Path to source directory. If--urlis provided, it clones into a subdirectory here.-o,--output-dir: Destination for generated harnesses and logs.-m,--model: LiteLLM model string (e.g.gemini/gemini-1.5-flash,ollama/llama3).-pp,--prompts-path: Path toprompts.yamlconfiguration.-p,--prompt: ID of the prompt template to use.-k,--api-key: API key string (optional if environment variable exists).-e,--extra-model-prompts: Vendor-specific parameters askey=valuepairs.-d,--debug: Enable verbose logging.-sm,--smell: Filter out low-maintainability code using Radon.-w,--workers: Number of concurrent generation threads.
Examples:
-
Clone from a URL to default Downloads directory:
atherislitellm
--url https://github.com/user/repo
--output-dir output_logs
--prompts-path prompts.yaml
--prompt base
--model gemini/gemini-1.5-flash
--api-key YOUR_KEY
--workers 4 \ -
Clone from a URL into a specific folder with complexity filtering:
atherislitellm
--url https://github.com/user/repo
--src-dir /home/user/fuzzing_projects
--output-dir output_logs
--prompts-path prompts.yaml
--prompt base
--model openai/gpt-4
--extra-model-prompts project=my-project
--debug
--smell \ -
Use a local directory with short-form flags:
atherislitellm
-s /home/user/local_source
-o output_logs
-pp prompts.yaml
-p base
-m gemini/gemini-1.5-flash
-k YOUR_KEY
-w 2 \ -
Run with local Ollama model:
export OLLAMA_API_BASE=http://localhost:11434 atherislitellm
-s /home/user/local_source
-o output_logs
-pp prompts.yaml
-p base
-m ollama/codegemma:7b
-d
-sm
-e project=fuzz-test \
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file atherislitellm-0.2.14.tar.gz.
File metadata
- Download URL: atherislitellm-0.2.14.tar.gz
- Upload date:
- Size: 12.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
7fa480c9959f53998617317cefda7465a4f4b55b4f7982de2e961c21c29678e9
|
|
| MD5 |
8e3cee11c5f00fafd3fa8110a10e20f0
|
|
| BLAKE2b-256 |
1d98d721d3cb5bf681d1a3a46bc2e2cecfb44f57b665bd54c65f0f6d3da1c049
|
Provenance
The following attestation bundles were made for atherislitellm-0.2.14.tar.gz:
Publisher:
publish.yml on mariobx/AtherisLiteLLM
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
atherislitellm-0.2.14.tar.gz -
Subject digest:
7fa480c9959f53998617317cefda7465a4f4b55b4f7982de2e961c21c29678e9 - Sigstore transparency entry: 1186470687
- Sigstore integration time:
-
Permalink:
mariobx/AtherisLiteLLM@a9f8e766d858173a4e5f5bb7b5118b02cdb89ef8 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/mariobx
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@a9f8e766d858173a4e5f5bb7b5118b02cdb89ef8 -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file atherislitellm-0.2.14-py3-none-any.whl.
File metadata
- Download URL: atherislitellm-0.2.14-py3-none-any.whl
- Upload date:
- Size: 16.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
74ada12cbda5f840f152ee5cbe2aa650700f680eb96a8ca781be658087c1451f
|
|
| MD5 |
5a9f42a176a46bffc7f87e369ca28661
|
|
| BLAKE2b-256 |
d8f57bb78f2d552caf9f67b47aa7251738548f99594e25c8f18a1d4acac20d83
|
Provenance
The following attestation bundles were made for atherislitellm-0.2.14-py3-none-any.whl:
Publisher:
publish.yml on mariobx/AtherisLiteLLM
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
atherislitellm-0.2.14-py3-none-any.whl -
Subject digest:
74ada12cbda5f840f152ee5cbe2aa650700f680eb96a8ca781be658087c1451f - Sigstore transparency entry: 1186470691
- Sigstore integration time:
-
Permalink:
mariobx/AtherisLiteLLM@a9f8e766d858173a4e5f5bb7b5118b02cdb89ef8 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/mariobx
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@a9f8e766d858173a4e5f5bb7b5118b02cdb89ef8 -
Trigger Event:
workflow_dispatch
-
Statement type: