honggfuzz

Honggfuzz Un fuzzer evolutivo, impulsado por retroalimentación y orientado a la seguridad. Honggfuzz es un fuzzer de propósito general que utiliza cobertura de código basada en software y hardware para encontrar errores. Es multiproceso, multihilo y admite fuzzing persistente para una velocidad...

resmack-fuzz-test

Resmack 模糊测试 本项目探索了一个基于反馈的模糊测试工具，它使用： ptrace 进行插桩 通过目标进程指定的动态内存断点 进程快照/恢复 使用 /proc/pid/map、/proc/pid/clearrefs 和 /proc/pid/pagemap 使用 processvmwritev 性能计数器作为反馈机制 语料库管理 此处实现的成功代码和概念将被吸收到 resmack 中，使其成为一个完整的模糊测试工具 而不仅仅是基于语法的数据生成器。 特性/实验 参见博客文章 Resmack: Fuzzing Thoughts - Part 2 了解本项目所做工作的完整说明。 使用方法...

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections

Large Language Models LLMs are rapidly evolving into agentic systems that interact with external tools and environments, introducing new security risks such as indirect prompt injection attacks through untrusted external sources. Existing defenses mainly focus on blocking malicious content at...

Babel: Jailbreaking Safety Attention Via Obfuscation Distribution Optimized Sampling

Despite rigorous safety alignment, Large Language Models LLMs remain vulnerable to jailbreak attacks. Existing black-box methods often rely on heuristic templates or exhaustive trials, lacking mechanistic interpretability and query efficiency. In this study, we investigate an intrinsic...

Red-Teaming Text-To-Image Systems by Rule-Based Preference Modeling

Text-to-image T2I models raise ethical and safety concerns due to their potential to generate inappropriate or harmful images. Evaluating these models' security through red-teaming is vital, yet white-box approaches are limited by their need for internal access, complicating their use with...

GitGot - Semi-automated, Feedback-Driven Tool To Rapidly Search Through Troves Of Public Data On GitHub For Sensitive Secrets

GitGot is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive secrets. How it Works During search sessions, users will provide feedback to GitGot about search results to ignore, and GitGot prunes the set of results. Users...

General Purpose Fuzzing: Honggfuzz

Honggfuzz is a general-purpose fuzzing tool. Given a starting corpus of test files, Hongfuzz supplies and modifies input to a test program and utilize the ptrace API / POSIX signal interface to detect and log crashes. Features Easy setup : No complicated configuration files or setup necessary —...