FormatFuzzer

FormatFuzzer FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs. It takes a binary template that describes the format of a binary input and generates an executable that produces and parses the given binary format. From a binary template for GIF,...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

nautilus

Nautilus 2.0 Nautilus es un fuzzer basado en gramática y guiado por cobertura. Puedes usarlo para mejorar tu cobertura de pruebas y encontrar más errores. Al especificar la gramática de entradas semi válidas, Nautilus es capaz de realizar mutaciones complejas y descubrir casos de prueba más...

fuzzer-testing

fuzzer-testing Standardized Docker images for evaluating open-source fuzzers, fully integrated with the corpora for easy experimentation. Supported / Included Fuzzers AFL github.com/google/AFL AFLplusplus github.com/AFLplusplus Honggfuzz github.com/google/honggfuzzz QSYM sslab-gatech/qsym Eclipse...

fuzzuf

fuzzuf Build Status fuzzuf fuzz ing u nification f ramework is a fuzzing framework with its own DSL to describe a fuzzing loop by constructing building blocks of fuzzing primitives. For build instructions and a tutorial, please follow building.md and tutorial.md. Why use fuzzuf? fuzzuf enables a...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

gustave

c Airbus 2021, sduverger GUSTAVE - Fuzzer de kernels de sistemas operativos embebidos ¿Qué es ? GUSTAVE es una plataforma de fuzzing para kernels de sistemas operativos embebidos. Está basada en QEMU y AFL y todos sus hermanos forkserver. Permite fuzzear kernels de SO como si fueran aplicaciones...

gustave

c Airbus 2021, sduverger GUSTAVE - Embedded OS kernel fuzzer What is it ? GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL and all of its forkserver siblings. It allows to fuzz OS kernels like simple applications. Thanks to QEMU, it is multi-platform. One can see...

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py -i in -o ou...

openssl-fuzz

Fuzzing OpenSSL This repository has a companion blog post titled "Finding CVE-2022-3786 openssl with Mayhem" at https://www.seandeaton.com. tl;dr All of this is taken care of for you with the included Dockerfile also on DockerHub. You can run it like so: Build the container docker build --tag...

oss-fuzz

OSS-Fuzz: Fuzzing Continuo para Software de Código Abierto Fuzz testing es una técnica bien conocida para descubrir errores de programación en el software. Muchos de estos errores detectables, como buffer overflow, pueden tener graves implicaciones de seguridad. Google ha encontrado miles de...

blackbox-fuzzing

Fuzzing de caja negra de dispositivos IoT usando el router TL-WR902AC como ejemplo Esta es la versión HTML de mi trabajo académico, que se puede descargar como PDF aquí. Introducción El fuzzing se ha convertido en "una de las formas más eficaces" de encontrar errores en el software. Con esta o...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156-Baron-Samedit This repo contains my work on clumsily implementing a public 1day exploit for the sudo bug. Wish me luck. If you would like to help please feel free. Compile the provided src/sudo sudoedit has been modified to use AFL harness to get input from STDIN AFL Fuzzy loop cras...

CVE-2024-1441

This repo is made to reproduce fuzzing and analysis process of discovering CVE-2024-1441 11 used commands 2 commands to install packages apt-get update apt-get install 1 git command git clone 4 build commands meson ninja make cargo build 1 command to set environment values export 1 command to run...

TriforceAFL

Nuevo: Para aquellos que quieran jugar con TriforceAFL y TLSF, Richard Johnson creó un Dockerfile que instala ambos e incluso compila un kernel de Linux por ti. Está disponible aquí https://hub.docker.com/r/moflow/afl-triforce/tags/. También nuevo: ¡afl-tmin ahora funciona con el forkserver!...

fpicker

fpicker fpicker is a Frida-based fuzzing suite that offers a variety of fuzzing modes for in-process fuzzing, such as an AFL++ mode or a passive tracing mode. It should run on all platforms that are supported by Frida. Installation Instructions Building and Running Creating a Fuzzing Harness Mode...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...

efcf-framework

EF/CF - el Fuzzer de Contratos Inteligentes de Ethereum Extremadamente Rápido EF/CF es un nuevo enfoque para el fuzzing de contratos inteligentes: en lugar de usar un nuevo fuzzer construido a medida, reutiliza la infraestructura de fuzzing existente de C/C++ para contratos inteligentes...

ghidralligator

Ghidralligator Ghidralligator es un emulador de pcode multiarquitectura en C++ basado en libsla de Ghidra, diseñado para fuzzing con AFL++. Permite realizar fuzzing basado en emulación manteniendo unas prestaciones interesantes al tratar con binarios que se ejecutan en arquitecturas exóticas. Su...