frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

frida-fuzzer

Frida API Fuzzer v1.4 版权所有 C 2020 Andrea Fioraldi [email protected] 根据 Apache 许可证 v2.0 发布 这个实验性模糊测试器用于 API 内存中的模糊测试。 设计深受 AFL/AFL++ 的启发和影响。 目前，变异器相当简单，只有 AFL 的 havoc 和 splice 阶段。 我仅在 tests/ 下的示例中测试过，这是一个进行中的项目，但已知至少在 GNU/Linux x8664 和 Android x8664 上可以工作。 你需要 Frida = 12.8.1 来运行它（pip3 install...

efi_fuzz

efifuzz A simple, coverage-guided fuzzer for UEFI NVRAM variables. Based on Qiling and AFL++. Written by Itai Liba @liba2k and Assaf Carlsbad @assafcarlsbad. Usage Using Docker environment 1. Build image: docker build -t efifuzz . 2. Test environment: docker run -v $PWD:/efifuzz -it efifuzz sh -c...

TriforceOpenBSDFuzzer

TriforceOpenBSDSyscallFuzzer 20160825 https://github.com/nccgroup/TriforceOpenBSDFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] 这是一组用于使用 TriforceAFL（即 AFL 和 QEMU）对 OpenBSD amd64 执行系统调用模糊测试的文件。要使用它，你需要 TriforceAFL https://github.com/nccgroup/TriforceAFL、FlashRD 2.0 发行...

webp-CVE-2023-4863

libwebp CVE-2023-4863 一个可以黑掉全世界的漏洞 - CVE-2023-4863 8秒内发现.webp漏洞（使用AFL++进行模糊测试）...

pwnedit

pwnedit CVE-2021-3156 - Sudo Baron Samedit Antes de entrar en los detalles técnicos, puedes ver un breve resumen aquí: https://www.youtube.com/watch?v=TLa2VqcGGEQ Episodios 1. Archivos | Blog | Vídeo ¿Por qué elegir sudo como objetivo de investigación? 2. Archivos | Blog | Vídeo Cómo funciona el...

AFLplusplus v5.03c

American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.03c Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...

FuzzPilot: Plateau-Triggered Recipe Validation for Structured Text Fuzzing

FuzzPilot is a controller for AFL++ that moves expensive reasoning out of the mutation hot path. When coverage plateaus, it snapshots the corpus, prepares candidate mutation recipes, evaluates them in short isolated AFL++ micro-campaigns, and promotes only recipes with positive validation reward...

EUVD-2019-7529

Malware in sbrugna...

EUVD-2023-30090

Malicious code in bioql PyPI...

CVE-2023-26266

In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution...

Linux Distros Unpatched Vulnerability : CVE-2023-26266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution. CVE-2023-262...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.100/.101 for Windows, Mac and 129.0.6668.100 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

aflnet_profuzzbench

It is an offensive tool for network protocols. The primary CVE ID is not present in the provided context, but the tool is an extension of American Fuzzy Lop AFL, which is a greybox fuzzer for protocol implementations. The tool, AFLNet, is seeded with a corpus of recorded message exchanges between...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.70/.71 for Windows, Mac and 129.0.6668.70 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

Stable Channel update for Desktop

The Stable channel has been updated to 128.0.6613.119/.120 for Windows, Mac and 128.0.6613.119 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 128.0.6613.120 for Windows and Mac...

Fuzzing µC/OS protocol stacks, Part 1: HTTP server fuzzing

This is the first post of a three-part series, where we will be delving into the intricacies of fuzzing µC/OS protocol stacks. The techniques I will discuss are universally applicable to various RTOS environments, though our focus will primarily be on µC/OS. Ill highlight some of the strategic co...

Fuzzing µC/OS protocol stacks, Part 3: TCP/IP server fuzzing, implementing a TAP driver

This is the final post in the three-part series that details techniques I used to fuzz two µC/OS protocol stacks: µC/TCP-IP and µC/HTTP-server. The first post highlighted code modifications necessary for developing a fuzzing harness tailored for the µC/HTTP-server. The second discussed a techniqu...

Stable Channel Update for Desktop

The Stable channel has been updated to 126.0.6478.114/115 for Windows, Mac and 126.0.6478.114 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Stable Channel Update for Desktop

The Stable channel has been updated to 124.0.6367.78/.79 for Windows and Mac and 124.0.6367.78 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 124.0.6367.78/.79 for Windows and M...