pwnedit

pwnedit CVE-2021-3156 - Sudo Baron Samedit Before heading into the technical details, you can watch a brief summary here: https://www.youtube.com/watch?v=TLa2VqcGGEQ Episodi 1. File | Blog | Video Perché scegliere sudo come obiettivo di ricerca? 2. File | Blog | Video Come funziona il fuzzing con...

webp-CVE-2023-4863

libwebp CVE-2023-4863 Una vulnerabilità per hackerare il mondo - CVE-2023-4863 Trovare la vulnerabilità .webp in 8 secondi Fuzzing con AFL++...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156-Baron-Samedit Questa repo contiene il mio lavoro sull'implementazione goffa di un exploit pubblico 1day per il bug di sudo. Augurami buona fortuna. Se vuoi aiutare, sentiti libero. Compila il src/sudo fornito sudoedit è stato modificato per usare AFL harness per ottenere input da...

openssl-fuzz

Fuzzing di OpenSSL Questo repository ha un post del blog associato intitolato "Finding CVE-2022-3786 openssl with Mayhem" all'indirizzo https://www.seandeaton.com. tl;dr Tutto questo è già gestito per te dal Dockerfile incluso disponibile anche su DockerHub. Puoi eseguirlo così: root@kitploit:...

Rogue-Framework

إطار روج "اجعلها تمطر. " "روج أمينديرس" أفضل وسيط معلومات في نايت سيتي إطار روج هو منصة عمل مكتبية لـ AFL++، والفحص عبر البنى باستخدام محاكي QEMU، وتطوير قوالب الاختبار harnesses، وتحليل Ghidra الرأسي الخفيف بدون واجهة رسومية، ومحوّرات مخصصة، ومقارنة التصحيحات. صُمم عمدًا ليكون منصة عمل قابلة...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

stb:stbi_read_fuzzer: Heap-buffer-overflow in load_jpeg_image

Detailed Report: https://oss-fuzz.com/testcase?key=5726154781884416 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b000006e0f Crash State: loadjpegimage stbijpegload stbiloadmain...