minder

| | | | | Installation | Documentation | Releases What is Minder? Minder is an open source platform that helps development teams and open source communities build more secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage their...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

EhTrace

EhTrace EhTrace pronounced "ATrace" is a high-performance binary tracing and instrumentation framework for Windows. It enables deep runtime analysis of Windows executables without requiring source code, binary modifications, or traditional debugging. Overview EhTrace leverages Windows Vectored...

honggfuzz

Honggfuzz 보안 중심의 피드백 기반 진화형 퍼저입니다. Honggfuzz는 소프트웨어 및 하드웨어 기반 코드 커버리지를 사용하여 버그를 찾는 범용 퍼저입니다. 멀티 프로세스, 멀티 스레드를 지원하며 극한의 속도를 위한 지속적 퍼징persistent fuzzing을 지원합니다. 주요 기능 빠름 : 멀티 프로세스 및 멀티 스레드 엔진으로 CPU의 모든 잠재력을 활용합니다. 지속적 퍼징Persistent Fuzzing : 프로세스 내에서 API를 직접 테스트하여 초당 최대 100만 회의 반복 속도를 제공합니다. 피드백...

paimei

PaiMei는 여러 확장 가능한 구성 요소로 이루어진 리버스 엔지니어링 프레임워크입니다. 이 프레임워크는 본질적으로 리버스 엔지니어의 스위스 아미 나이프라고 생각할 수 있으며, 퍼저 지원, 코드 커버리지 추적, 데이터 흐름 추적 등 다양한 정적 및 동적 작업에 효과적임이 입증되었습니다. 자세한 내용은 docs\index.html을 참조하세요...

Cartographer

Cartographer 코드 커버리지 매핑 Austin Peavy가 개발 - https://github.com/aus10pv NCC Group Plc가 오픈 소스로 공개 - https://www.nccgroup.com/ Apache 2.0 라이선스로 공개됨 자세한 내용은 LICENSE 참조 설명 Cartographer는 Ghidra용 코드 커버리지 매핑 플러그인으로, 연구자들이 소스 코드 없이도 프로그램의 어느 부분이 실행되었는지 관찰할 수 있게 해줍니다. 목차 주요 기능 설치 플러그인 로드 사용법 코드 커버리지 파일 로드 코...

revsync

revsync IDA Pro, Binary Ninja 및 Vivisect용 실시간 동기화 플러그인 동기화 항목: 주석 심볼 이름 스택 변수 이름 구조체 코드 커버리지블록을 보는 데 소요된 시간 IDA Pro 설치 먼저 IDA 데이터 디렉터리에 클론하세요: Windows: %APPDATA%\Hex-Rays\IDA Pro Mac/Linux: /.idapro 그런 다음: 위 디렉터리에 idapythonrc.py 파일을 만들고 import revsync를 추가하세요. config.json.template을 config.json으로...

Astra Linux – Vulnerability in phpunit

PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52, involving unsafe deserialization of code coverage data during PHPT test executions. The vulnerability resides in the cleanupForCoverage method, which...

wtf v0.5.8

what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...

gha-lab-227431b300

Kiwi TCMS - Open-Source-Testmanagement .. image:: https://img.shields.io/docker/pulls/kiwitcms/kiwi :target: https://kiwitcms.readthedocs.io/en/latest/installingdocker.html :alt: Downloads from Docker Hub .. image:: https://readthedocs.org/projects/kiwitcms/badge/?version=latest :target:...

[SECURITY] Fedora 43 Update: perl-Devel-Cover-1.51-4.fc43

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

[SECURITY] Fedora 44 Update: perl-Devel-Cover-1.52-4.fc44

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: The KCOV instrumentation is disabled after the loadsegments function is called. The loadsegments function modifies segment registers, invalidating the GS base—something that KCOV relies on for per-cpu data. When...

CVE-2026-43331

Summary of details (CVE-2026-43331): In the Linux kernel, a KCOV instrumentation issue in the x86/kexec path is resolved by disabling KCOV for the affected areas. The root cause is that load_segments() changes segment registers and invalidates the GS base KCOV relies on for per-CPU data, causing ...

[SECURITY] Fedora 42 Update: perl-Devel-Cover-1.44-7.fc42

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

CVE-2026-32805

CVE-2026-32805 corresponds to an Archive Slip flaw in Romeo’s webserver sanitization (github.com/ctfer-io/romeo/webserver). The root cause is a missing trailing path separator in the strings.HasPrefix check within sanitizeArchivePath, enabling a crafted tar to traverse outside the intended destin...

CVE-2026-32805 Romeo is vulnerable to Archive Slip due to missing checks in sanitization

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.2, the sanitizeArchivePath function in webserver/api/v1/decoder.go lines 80-88 is vulnerable to a path...

CVE-2026-32805

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.2, the sanitizeArchivePath function in webserver/api/v1/decoder.go lines 80-88 is vulnerable to a path...

CVE-2026-32737

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from the "hardened" namespace to any Pod...

Romeo 路径遍历漏洞

Romeo is an open-source Go application code coverage calculation tool developed by CTFer.io. Versions of Romeo prior to 0.2.2 contained a path traversal vulnerability. This vulnerability stemmed from defects in the path traversal checks, which could lead to arbitrary file writing...