unicorn

Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

fuzzbench

FuzzBench: Fuzzer Benchmarking As a Service FuzzBench is a free service that evaluates fuzzers on a wide variety of real-world benchmarks, at Google scale. The goal of FuzzBench is to make it painless to rigorously evaluate fuzzing research and make fuzzing research easier for the community to...

cargo-fuzz

cargo fuzz ¡Un subcomando decargo para hacer fuzzing con libFuzzer! ¡Fácil de usar! Instalación $ cargo install cargo-fuzz Nota: libFuzzer necesita soporte de sanitizers de LLVM, por lo que esto solo funciona en x86-64 y Aarch64, y solo en sistemas operativos tipo Unix no Windows. También necesit...

ruzzy

Ruzzy Un fuzzer guiado por cobertura para código Ruby puro y extensiones C de Ruby. Ruzzy está fuertemente inspirado en Atheris, un fuzzer de Python. Ruzzy utiliza libFuzzer o LibAFL para su instrumentación de cobertura y su motor de fuzzing. Ruzzy también es compatible con AddressSanitizer y...

oss-fuzz

OSS-Fuzz：开源软件的持续模糊测试 模糊测试是一种广为人知的用于发现软件中编程错误的技术。许多这类可检测的错误，例如缓冲区溢出，可能具有严重的安全隐患。Google 通过部署对 Chrome 组件的引导式进程内模糊测试已发现数千个安全漏洞和稳定性缺陷，现在我们希望与开源社区共享这一服务。 与核心基础设施倡议和OpenSSF合作，OSS-Fuzz 旨在通过结合现代模糊测试技术与可扩展的分布式执行，使常见的开源软件更加安全稳定。不符合 OSS-Fuzz 条件（例如闭源软件）的项目可以运行自己的 ClusterFuzz 或 ClusterFuzzLite 实例。 我们支持...

fuzzuf

fuzzuf Build Status fuzzuf fuzz ing u nification f ramework is a fuzzing framework with its own DSL to describe a fuzzing loop by constructing building blocks of fuzzing primitives. For build instructions and a tutorial, please follow building.md and tutorial.md. Why use fuzzuf? fuzzuf enables a...

autoharness

AutoHarness Created by Akshat Parikh What is this tool? AutoHarness is a tool that automatically generates fuzzing harnesses for you. This idea stems from a concurrent problem in fuzzing codebases today: large codebases have thousands of functions and pieces of code that can be embedded fairly de...

uniFuzzer

uniFuzzer uniFuzzer is a fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer. Currently it supports fuzzing 32-bits LSB ELF files on ARM/MIPS, which are usually seen in IoT devices. 中文介绍 Features very little hack and easy to build can target any specified function or code snipp...

CVE-2023-4863-

CVE-2023-4863 Desencadenando la famosa vuln 0day de libweb con libfuzzer...

centipede

Centipede - un motor de fuzzing distribuido. Trabajo en curso. Por qué Centipede ¿Por qué no? Actualmente intentamos fuzzear objetivos muy grandes y muy lentos para los que libFuzzer, AFL y similares no escalan necesariamente bien. Para uno de nuestros ejemplos motivadores, ver SiliFuzz. Mientras...

Pishi

Pishi Pishi es una herramienta de reescritura binaria estática diseñada para instrumentar basic blocks en el kernel XNU y en extensiones de kernel kexts arbitrarias de macOS. para el kernel XNU, Pishi permite instrumentar a nivel de función, archivo o carpeta. Por ejemplo, puedes instrumentar tod...

bunch-of-fuzzers-developed-using-libfuzzer-and-asan

bunch-of-fuzzers-developed-using-libfuzzer-and-asan...

fuzzing

libfuzzer-workshop "现代 C/C++ 项目模糊测试"工作坊的材料。 该工作坊的第一个版本已在 ZeroNights'16 安全会议上展示。 免责声明 本工作坊最初于 2016 年开发。截至今天（2021 年及以后），工作坊的实践部分可能无法立即运行，因为 libFuzzer 多年来已发生巨大变化。工作坊的理论部分仍然是非常好的学习材料，但对于实践课程，建议遵循最新版本的 libFuzzer 教程。 要求 2-3 小时的时间 基于 Linux 的操作系统 C/C++ 经验（不需要特别高深，但需要能够阅读、编写和编译 C/C++ 代码） 最新版本的 clang...

llvm:llvm-special-case-list-fuzzer: Crash in p_ere

Detailed Report: https://oss-fuzz.com/testcase?key=6388532688781312 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b6587ce1ff0 Crash State: pere pere pere Sanitizer: addre...

php:php-fuzz-tracing-jit: Heap-use-after-free in zend_std_read_property

Detailed Report: https://oss-fuzz.com/testcase?key=6753130298277888 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x78061c2f56ec Crash State: zendstdreadproperty...

php:php-fuzz-execute: Use-of-uninitialized-value in is_cacheable_stream_path

Detailed Report: https://oss-fuzz.com/testcase?key=5674034779193344 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: iscacheablestreampath accelmakepersistentkey...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in read_lazy_chunk_bytes

Detailed Report: https://oss-fuzz.com/testcase?key=4963328186449920 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7832445e62d1 Crash State: readlazychunkbyt...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::AMFImporter::Postprocess_BuildMeshSet

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5236639130779648 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

bios-bmc-smm-error-logger:rde_fuzz: Heap-buffer-overflow in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__init

Detailed Report: https://oss-fuzz.com/testcase?key=5942459638284288 Project: bios-bmc-smm-error-logger Fuzzing Engine: libFuzzer Fuzz Target: rdefuzz Job Type: libfuzzerasanbios-bmc-smm-error-logger Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x781f616e0338 Crash...