Show HN: Mist – a tool pairing SAST and Fuzzing for smarter Bug Hunting

Category: security

Tags: security, fuzzing, sast, dast, python

Score: 6.0/10 (Innovation: 6, Technical: 6, Documentation: 7, Utility: 5)

Mist is a hybrid application security testing orchestrator that funnels Semgrep static-analysis findings into AFLGo directed greybox fuzzing campaigns, automating the SAST-to-DAST pipeline. It is interesting because it packages the DGF+pattern-based SAST combination as a reusable Python framework with Docker support, positioning itself as a lighter alternative to symbolic execution for vulnerability hunting.

Target audience: security engineers and bug hunters

Repository: https://github.com/alessandroPalazzolo/mist · Python · Apache-2.0 · 4 stars

View on Hacker News