CVE-2021-3156-Baron-Samedit

CVE-2021-3156-Baron-Samedit 这个仓库包含了我笨拙地实现sudo漏洞的公开1day利用的工作。祝我好运。 如果您愿意帮忙，请随意。 编译提供的 src/sudo sudoedit 已被修改为使用AFL测试框架从STDIN获取输入 迄今为止发现的AFL模糊循环崩溃测试用例，请查看： root@kitploit: -rw------- 1 root root 309 Jan 28 03:31 id:000000,sig:11,src:000024,time:335,op:havoc,rep:2 -rw------- 1 root root 309 Jan 28...

openssl-fuzz

模糊测试 OpenSSL 本仓库有一篇配套博客文章，标题为“使用 Mayhem 发现 CVE-2022-3786 openssl”，链接为 https://www.seandeaton.com。 摘要 所有这些都通过随附的 Dockerfile（也发布在 DockerHub 上）为您处理好了。您可以这样运行： root@kitploit: Build the container docker build --tag openssl-cve-2022-3768 . Or if you just want to pull down the existing one: TODO Ensure...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

webp-CVE-2023-4863

libwebp CVE-2023-4863 Una vulnerabilidad para hackear el mundo - CVE-2023-4863 Encontrando la vulnerabilidad .webp en 8s Fuzzing con AFL++...

pwnedit

pwnedit CVE-2021-3156 - Sudo Baron Samedit 在进入技术细节之前，您可以在此观看简要总结：https://www.youtube.com/watch?v=TLa2VqcGGEQ 剧集 1. 文件 | 博客 | 视频 为什么选择 sudo 作为研究目标？ 2. 文件 | 博客 | 视频 AFL 模糊测试的工作原理 3. 文件 | 博客 | 视频 AFL 模糊测试问题排查 4. 文件 | 博客 | 视频 通过模糊测试发现缓冲区溢出 5. 文件 | 博客 | 视频 通过模糊测试发现崩溃？最小化 AFL 测试用例 6. 文件 | 博客 | 视频 使用...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...

fio:fuzz_parseini: Heap-use-after-free in opt_cmp

Detailed Report: https://oss-fuzz.com/testcase?key=5175641173524480 Project: fio Fuzzing Engine: afl Fuzz Target: fuzzparseini Job Type: aflasanfio Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x606000000200 Crash State: optcmp sortoptions fiooptionsparse Sanitizer:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in load_jpeg_image

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5726154781884416 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b000006e0f Crash State:...