openssl-fuzz

Fuzzing OpenSSL This repository has a companion blog post titled "Finding CVE-2022-3786 openssl with Mayhem" at https://www.seandeaton.com. tl;dr All of this is taken care of for you with the included Dockerfile also on DockerHub. You can run it like so: Build the container docker build --tag...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156-Baron-Samedit This repo contains my work on clumsily implementing a public 1day exploit for the sudo bug. Wish me luck. If you would like to help please feel free. Compile the provided src/sudo sudoedit has been modified to use AFL harness to get input from STDIN AFL Fuzzy loop cras...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...

webp-CVE-2023-4863

libwebp CVE-2023-4863 Una vulnerabilidad para hackear el mundo - CVE-2023-4863 Encontrando la vulnerabilidad .webp en 8s Fuzzing con AFL++...

pwnedit

pwnedit CVE-2021-3156 - Sudo Baron Samedit Antes de entrar en los detalles técnicos, puedes ver un breve resumen aquí: https://www.youtube.com/watch?v=TLa2VqcGGEQ Episodios 1. Archivos | Blog | Vídeo ¿Por qué elegir sudo como objetivo de investigación? 2. Archivos | Blog | Vídeo Cómo funciona el...

fio:fuzz_parseini: Heap-use-after-free in opt_cmp

Detailed Report: https://oss-fuzz.com/testcase?key=5175641173524480 Project: fio Fuzzing Engine: afl Fuzz Target: fuzzparseini Job Type: aflasanfio Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x606000000200 Crash State: optcmp sortoptions fiooptionsparse Sanitizer:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in load_jpeg_image

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5726154781884416 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b000006e0f Crash State:...