honggfuzz

Honggfuzz Un fuzzer evolutivo, impulsado por retroalimentación y orientado a la seguridad. Honggfuzz es un fuzzer de propósito general que utiliza cobertura de código basada en software y hardware para encontrar errores. Es multiproceso, multihilo y admite fuzzing persistente para una velocidad...

Cartographer

Cartographer 绘制代码覆盖率 由 Austin Peavy 开发 - https://github.com/aus10pv 由 NCC Group Plc 以开源形式发布 - https://www.nccgroup.com/ 根据 Apache 2.0 许可证发布（更多信息请参阅 LICENSE） 描述 Cartographer 是适用于 Ghidra 的代码覆盖率映射插件，使研究人员无需源代码即可观察程序中哪些部分已被执行。 目录 主要功能 安装 加载插件 使用方法 加载代码覆盖率文件 代码覆盖率详细信息 在覆盖率之间切换 表达式解析器 语法 示例 贡献 从源代码构建 报...

EhTrace

EhTrace EhTrace （发音为"ATrace"）是一个高性能的Windows二进制跟踪与插桩框架。它能够在无需源代码、无需修改二进制文件、无需传统调试的情况下，对Windows可执行文件进行深入的运行时分析。 概述 EhTrace利用Windows向量化异常处理（VEH）和块步进技术，以极低的开销提供全面的执行跟踪。与传统的调试或插桩工具不同，EhTrace完全在进程内运行，无需对目标二进制文件进行任何修补。 关键特性 零二进制修改 ：无需修改目标二进制文件即可跟踪执行 高性能 ：块步进代替单步执行，每秒约处理4300万事件 完整代码覆盖 ：自动检测和跟踪基本块 寄存器状态监控...

revsync

revsync IDA Pro、Binary Ninja 和 Vivisect 的实时同步插件 同步内容： 注释 符号名称 栈变量名称 结构体 代码覆盖率（查看某个代码块所花费的时间） IDA Pro 安装 首先，克隆到 IDA 数据目录： Windows: %APPDATA%\Hex-Rays\IDA Pro Mac/Linux: /.idapro 然后： 在上面的目录中创建一个名为 idapythonrc.py 的文件，并追加 import revsync。 将 config.json.template 复制为 config.json 并填写内容。 重启 IDA，并在控制台中查看...

minder

| | | | | 安装 | 文档 | 发布版本 Minder 是什么？ Minder 是一个开源平台，帮助开发团队和开源社区构建更安全的软件，并向他人证明所构建的内容是安全的。Minder 通过提供一组检查策略来帮助项目所有者主动管理其安全态势，从而最小化软件供应链中的风险，并向下游消费者证明其安全实践。 Minder 允许用户注册仓库并定义策略，以确保仓库和工件配置一致且安全。策略可以设置为仅告警或自动修复。Minder 提供了一组预定义的规则，也可以配置为应用自定义规则。 Minder 可以部署为 Helm chart，并提供一个 CLI 工具 minder。Custcodian...

paimei

PaiMei 是一个由多个可扩展组件组成的逆向工程框架。该框架本质上可以看作是逆向工程师的瑞士军刀，已被证明可有效用于各种静态和动态任务，例如模糊测试辅助、代码覆盖率跟踪、数据流跟踪等。 有关更多详细信息，请参阅 docs\index.html。...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

lighthouse

Lighthouse - Un explorador de cobertura para ingenieros inversos Descripción general Lighthouse es un potente explorador de cobertura de código para IDA Pro y Binary Ninja, que proporciona a los investigadores de software controles únicos e interactivos para estudiar mapas de ejecución de...

Astra Linux – Vulnerability in phpunit

PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52, involving unsafe deserialization of code coverage data during PHPT test executions. The vulnerability resides in the cleanupForCoverage method, which...

wtf v0.5.8

what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...

gha-lab-227431b300

Kiwi TCMS - Open-Source-Testmanagement .. image:: https://img.shields.io/docker/pulls/kiwitcms/kiwi :target: https://kiwitcms.readthedocs.io/en/latest/installingdocker.html :alt: Downloads from Docker Hub .. image:: https://readthedocs.org/projects/kiwitcms/badge/?version=latest :target:...

[SECURITY] Fedora 43 Update: perl-Devel-Cover-1.51-4.fc43

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

[SECURITY] Fedora 44 Update: perl-Devel-Cover-1.52-4.fc44

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

Directed Symbolic Execution for Vulnerability Discovery: An LLM-Guided Approach in KLEE

Symbolic execution effectively discovers security violations but suffers from path explosion. Engines like KLEE therefore use path prioritization heuristics to order state exploration, typically optimizing code coverage. However, path prioritization can become trapped in cyclic control-flow...

Fuzz'EMup: Leveraging EM Side-Channel Emanation to Guide Black-Box Embedded Firmware Fuzzing

As IoT and embedded devices proliferate across various domains, securing their firmware has become critical. Fuzzing offers a systematic approach to uncovering vulnerabilities in firmware, and coverage feedback can improve its effectiveness by guiding exploration. However, many devices make...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: The KCOV instrumentation is disabled after the loadsegments function is called. The loadsegments function modifies segment registers, invalidating the GS base—something that KCOV relies on for per-cpu data. When...

CVE-2026-43331

Summary of details (CVE-2026-43331): In the Linux kernel, a KCOV instrumentation issue in the x86/kexec path is resolved by disabling KCOV for the affected areas. The root cause is that load_segments() changes segment registers and invalidates the GS base KCOV relies on for per-CPU data, causing ...

[SECURITY] Fedora 42 Update: perl-Devel-Cover-1.44-7.fc42

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

CVE-2026-32805 Romeo is vulnerable to Archive Slip due to missing checks in sanitization

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.2, the sanitizeArchivePath function in webserver/api/v1/decoder.go lines 80-88 is vulnerable to a path...

CVE-2026-32805

CVE-2026-32805 corresponds to an Archive Slip flaw in Romeo’s webserver sanitization (github.com/ctfer-io/romeo/webserver). The root cause is a missing trailing path separator in the strings.HasPrefix check within sanitizeArchivePath, enabling a crafted tar to traverse outside the intended destin...