frida-fuzzer

Frida API Fuzzer v1.4 版权所有 C 2020 Andrea Fioraldi [email protected] 根据 Apache 许可证 v2.0 发布 这个实验性模糊测试器用于 API 内存中的模糊测试。 设计深受 AFL/AFL++ 的启发和影响。 目前，变异器相当简单，只有 AFL 的 havoc 和 splice 阶段。 我仅在 tests/ 下的示例中测试过，这是一个进行中的项目，但已知至少在 GNU/Linux x8664 和 Android x8664 上可以工作。 你需要 Frida = 12.8.1 来运行它（pip3 install...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

efi_fuzz

efifuzz A simple, coverage-guided fuzzer for UEFI NVRAM variables. Based on Qiling and AFL++. Written by Itai Liba @liba2k and Assaf Carlsbad @assafcarlsbad. Usage Using Docker environment 1. Build image: docker build -t efifuzz . 2. Test environment: docker run -v $PWD:/efifuzz -it efifuzz sh -c...

TriforceOpenBSDFuzzer

TriforceOpenBSDSyscallFuzzer 20160825 https://github.com/nccgroup/TriforceOpenBSDFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] This is a collection of files used to perform system call fuzzing of OpenBSD amd64 using TriforceAFL i.e. AFL and QEMU. To use it you will...

webp-CVE-2023-4863

libwebp CVE-2023-4863 A Vulnerability to Hack The World - CVE-2023-4863 Finding The .webp Vulnerability in 8s Fuzzing with AFL++...

pwnedit

pwnedit CVE-2021-3156 - Sudo Baron Samedit Before heading into the technical details, you can watch a brief summary here: https://www.youtube.com/watch?v=TLa2VqcGGEQ Episodes 1. Files | Blog | Video Why Pick sudo as Research Target? 2. Files | Blog | Video How Fuzzing with AFL works 3. Files | Bl...

AFLplusplus v5.03c

American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.03c Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...

FuzzPilot: Plateau-Triggered Recipe Validation for Structured Text Fuzzing

FuzzPilot is a controller for AFL++ that moves expensive reasoning out of the mutation hot path. When coverage plateaus, it snapshots the corpus, prepares candidate mutation recipes, evaluates them in short isolated AFL++ micro-campaigns, and promotes only recipes with positive validation reward...

EUVD-2019-7529

Malware in sbrugna...

EUVD-2023-30090

Malicious code in bioql PyPI...

CVE-2023-26266

In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution...

Linux Distros Unpatched Vulnerability : CVE-2023-26266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution. CVE-2023-262...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.100/.101 for Windows, Mac and 129.0.6668.100 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

aflnet_profuzzbench

It is an offensive tool for network protocols. The primary CVE ID is not present in the provided context, but the tool is an extension of American Fuzzy Lop AFL, which is a greybox fuzzer for protocol implementations. The tool, AFLNet, is seeded with a corpus of recorded message exchanges between...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.70/.71 for Windows, Mac and 129.0.6668.70 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

Stable Channel update for Desktop

The Stable channel has been updated to 128.0.6613.119/.120 for Windows, Mac and 128.0.6613.119 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 128.0.6613.120 for Windows and Mac...

Fuzzing µC/OS protocol stacks, Part 1: HTTP server fuzzing

This is the first post of a three-part series, where we will be delving into the intricacies of fuzzing µC/OS protocol stacks. The techniques I will discuss are universally applicable to various RTOS environments, though our focus will primarily be on µC/OS. Ill highlight some of the strategic co...

Fuzzing µC/OS protocol stacks, Part 3: TCP/IP server fuzzing, implementing a TAP driver

This is the final post in the three-part series that details techniques I used to fuzz two µC/OS protocol stacks: µC/TCP-IP and µC/HTTP-server. The first post highlighted code modifications necessary for developing a fuzzing harness tailored for the µC/HTTP-server. The second discussed a techniqu...

Stable Channel Update for Desktop

The Stable channel has been updated to 126.0.6478.114/115 for Windows, Mac and 126.0.6478.114 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Stable Channel Update for Desktop

The Stable channel has been updated to 124.0.6367.78/.79 for Windows and Mac and 124.0.6367.78 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 124.0.6367.78/.79 for Windows and M...