TriforceAFL

New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Linux kernel for you. It's available here https://hub.docker.com/r/moflow/afl-triforce/tags/. Also new: afl-tmin now works with the forkserver!...

blackbox-fuzzing

Blackbox-Fuzzing of IoT Devices Using the Router TL-WR902AC as Example This is the HTML version of my term paper which can be downloaded as PDF here. Introduction Fuzzing has become "one of the most effective ways" of finding bugs in software. With this or similar claims, many current...

CVE-2024-1441

This repo is made to reproduce fuzzing and analysis process of discovering CVE-2024-1441 11 used commands root@kitploit: 2 commands to install packages apt-get update apt-get install 1 git command git clone 4 build commands meson ninja make cargo build 1 command to set environment values export 1...

oss-fuzz

OSS-Fuzz: Fuzzing Continuo para Software de Código Abierto Fuzz testing es una técnica bien conocida para descubrir errores de programación en el software. Muchos de estos errores detectables, como buffer overflow, pueden tener graves implicaciones de seguridad. Google ha encontrado miles de...

fpicker

fpicker fpicker es un conjunto de herramientas de fuzzing basado en Frida que ofrece una variedad de modos de fuzzing para fuzzing en proceso, como un modo AFL++ o un modo de rastreo pasivo. Debería funcionar en todas las plataformas compatibles con Frida. Instrucciones de instalación Compilación...

FormatFuzzer

FormatFuzzer FormatFuzzer es un marco de trabajo para la generación y análisis de entradas binarias de alta eficiencia y alta calidad. Toma una plantilla binaria que describe el formato de una entrada binaria y genera un ejecutable que produce y analiza el formato binario dado. A partir de una...

openssl-fuzz

Fuzzing OpenSSL This repository has a companion blog post titled "Finding CVE-2022-3786 openssl with Mayhem" at https://www.seandeaton.com. tl;dr All of this is taken care of for you with the included Dockerfile also on DockerHub. You can run it like so: root@kitploit: Build the container docker...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

gustave

c Airbus 2021, sduverger GUSTAVE - Embedded OS kernel fuzzer What is it ? GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL and all of its forkserver siblings. It allows to fuzz OS kernels like simple applications. Thanks to QEMU, it is multi-platform. One can see...

gustave

c Airbus 2021, sduverger GUSTAVE - Fuzzer de kernels de sistemas operativos embebidos ¿Qué es ? GUSTAVE es una plataforma de fuzzing para kernels de sistemas operativos embebidos. Está basada en QEMU y AFL y todos sus hermanos forkserver. Permite fuzzear kernels de SO como si fueran aplicaciones...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

fuzzer-testing

fuzzer-testing 오픈 소스 퍼저를 평가하기 위한 표준화된 Docker 이미지로, corpora와 완전히 통합되어 쉬운 실험을 제공합니다. 지원/포함된 퍼저 AFL github.com/google/AFL AFLplusplus github.com/AFLplusplus Honggfuzz github.com/google/honggfuzzz QSYM sslab-gatech/qsym Eclipser SoftSec-KAIST/Eclipser Ankou SoftSec-KAIST/Ankou Angora...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156-Baron-Samedit This repo contains my work on clumsily implementing a public 1day exploit for the sudo bug. Wish me luck. If you would like to help please feel free. Compile the provided src/sudo sudoedit has been modified to use AFL harness to get input from STDIN AFL Fuzzy loop cras...

fuzzuf

fuzzuf fuzzuf fuzz ing u nification f ramework es un marco de trabajo framework de fuzzing con su propio DSL para describir un bucle de fuzzing mediante la construcción de bloques de construcción de primitivas de fuzzing. Para instrucciones de compilación y un tutorial, siga building.md y...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

nautilus

Nautilus 2.0 Nautilus es un fuzzer basado en gramática y guiado por cobertura. Puedes usarlo para mejorar tu cobertura de pruebas y encontrar más errores. Al especificar la gramática de entradas semi válidas, Nautilus es capaz de realizar mutaciones complejas y descubrir casos de prueba más...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start root@kitploit: pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...

efcf-framework

EF/CF - the Extremely Fast ethereum smart Contract Fuzzer EF/CF is a new approach to smart contract fuzzing: instead of using a new custom built fuzzer, it repurposes existing fuzzing infrastructure of C/C++ code to smart contracts. Currently, AFL++ is the primarily supported fuzzer, although the...

ghidralligator

Ghidralligator Ghidralligator is a C++ multi-architecture pcode emulator based on the Ghidra libsla, designed for fuzzing with AFL++. It allows performing emulation-based fuzzing while keeping interesting performances when dealing with binaries running on exotic architectures. Its extensible natu...