honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

webp-CVE-2023-4863

libwebp CVE-2023-4863 A Vulnerability to Hack The World - CVE-2023-4863 Finding The .webp Vulnerability in 8s Fuzzing with AFL++...

pwnedit

pwnedit CVE-2021-3156 - Sudo Baron Samedit Before heading into the technical details, you can watch a brief summary here: https://www.youtube.com/watch?v=TLa2VqcGGEQ Episodes 1. Files | Blog | Video Why Pick sudo as Research Target? 2. Files | Blog | Video How Fuzzing with AFL works 3. Files | Bl...

openssl-fuzz

Fuzzing OpenSSL This repository has a companion blog post titled "Finding CVE-2022-3786 openssl with Mayhem" at https://www.seandeaton.com. tl;dr All of this is taken care of for you with the included Dockerfile also on DockerHub. You can run it like so: Build the container docker build --tag...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156-Baron-Samedit This repo contains my work on clumsily implementing a public 1day exploit for the sudo bug. Wish me luck. If you would like to help please feel free. Compile the provided src/sudo sudoedit has been modified to use AFL harness to get input from STDIN AFL Fuzzy loop cras...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...

mruby:mruby_fuzzer: Crash in mrb_vm_exec

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6212427713413120 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0002dfff8004 Crash State: mrbvmexec...

libyal:libqcow_file_fuzzer: Heap-buffer-overflow in libqcow_internal_file_read_buffer_from_file_io_handle

Detailed Report: https://oss-fuzz.com/testcase?key=6523664565338112 Project: libyal Fuzzing Engine: afl Fuzz Target: libqcowfilefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x77469d0e06d3 Crash State:...

mruby:mruby_fuzzer: Heap-buffer-overflow in lambda_body

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6192565519712256 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x75b0aed10258 Crash State:...

kimageformats:kimgio_heif_fuzzer: Stack-use-after-scope in StreamReader_CApi::wait_for_file_size

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5003657637330944 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address:...

solidity:yul_proto_diff_custom_mutate_ossfuzz: Segv on unknown address in solidity::yul::test::ExpressionEvaluator::evaluateArgs

Detailed Report: https://oss-fuzz.com/testcase?key=5135205976047616 Project: solidity Fuzzing Engine: afl Fuzz Target: yulprotodiffcustommutateossfuzz Job Type: aflasansolidity Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

mruby:mruby_fuzzer: Negative-size-param in bt_match

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5685642238689280 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: btmatch btmatch btmatch...

ogre:ogre_deep_fuzz: Heap-buffer-overflow in Ogre::MeshSerializerImpl::flipEndian

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=4541267085426688 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7cbb04fef550 Crash State:...

gdal:s101_fuzzer: Heap-buffer-overflow in DDFSubfieldDefn::GetDataLength

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6679072620216320 Project: gdal Fuzzing Engine: afl Fuzz Target: s101fuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x77c5c9ce0f00 Crash State:...

assimp:assimp_fuzzer: Heap-buffer-overflow in inflate

Detailed Report: https://oss-fuzz.com/testcase?key=6437434371145728 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75d3f08e1708 Crash State: inflate...

matio:matio_fuzzer: Heap-buffer-overflow in ParseOpaqueMetadata

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5213059865182208 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

libvips:vips_fuzzer: Heap-buffer-overflow in vips_stdif_generate

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5109269497446400 Project: libvips Fuzzing Engine: afl Fuzz Target: vipsfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x750f7bcff161 Crash...

tdengine:sql-fuzzer: Global-buffer-overflow in tGetToken

Detailed Report: https://oss-fuzz.com/testcase?key=4807015468957696 Project: tdengine Fuzzing Engine: afl Fuzz Target: sql-fuzzer Job Type: aflasantdengine Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x563c8298c4e8 Crash State: tGetToken parse qParseSqlSyntax...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_vformat

Detailed Report: https://oss-fuzz.com/testcase?key=5605604055121920 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x747fd4ee5ccd Crash State: mrbvformat errorva mrbraisef Sanitizer: addres...

gpsd:FuzzDrivers: Global-buffer-overflow in navcom_parse

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=5970909205954560 Project: gpsd Fuzzing Engine: afl Fuzz Target: FuzzDrivers Job Type: aflasangpsd Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5568384c7d40 Crash State:...