ansvif

ansvif A Not So Very Intelligent Fuzzer Marshall Whittaker oxagast [email protected] As the complexity of a system rises, as does the potential for problems within that system. --Whittaker's Law Compile Dependancies: automake autoconf-archive zlib1g-dev g++ gcc and libgtk2.0-dev if you want...

SecBugs

Bugs de Seguridad Divulgaciones completas para IDs de CVE, pruebas de concepto, exploits, bugs 0day y demás...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS EN ANDROID NULL PTR DEREF, OOM SOLO POR LAS RISAS...

galer

galer /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol. Resources...

FuzzingBrain-Bench

FuzzingBrain Bench Un benchmark para la reproducción de vulnerabilidades impulsada por LLM en 77 errores de día cero reales en 43 proyectos de código abierto C / C++ / Java. Cada desafío le da al agente solo el harness de fuzzing el objetivo y el código fuente del proyecto en la revisión vulnerab...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

awesome_windows_logical_bugs

awesomewindowslogicalbugs Creé este repositorio para las personas que quieren aprender sobre bugs lógicos de escalada de privilegios en Windows. También añadí algunos de mis hallazgos. Puedes contactarme vía @404death para añadir un buen artículo que me haya perdido. work in progress WIP , I'm...

Cooper-ndss-2022

Cooper: Testing the Binding Code of Scripting Languages with Cooperative Mutation Cooper utilize cooperative mutation to test the binding code of scripting languages to find memory-safe issues. Cooperative mutation simultaneously modifies the script code and the related document objects to explor...

n-days

n-days Una colección de PoCs y writeups de vulnerabilidades de iOS descubiertas por mí, diffeadas a partir de actualizaciones In-The-Wild o simplemente bugs no públicos interesantes. CVE| Parcheado en| Enlace| Reportado por mí| Explotado ITW| Descripción ---|---|---|---|---|--- CVE-2021-1757| iOS...

Kernel_Driver_bugs

Este repositorio no tiene un README...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

fluffi

FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...

fisy-fuzz

FIle SYstem - FUZZer This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April. Conference Talk Conference Talk Single Video Conference Material Goal The goal of this framework is to uncover kernel security bugs on UNIX system...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

sqlancer

SQLancerは、データベース管理システム（DBMS）の実装におけるバグを自動的に発見するためのツールです。つまり、ユーザーが作成したクエリではなく、DBMS実装のコード内のバグを見つけます。SQLancerは、成熟した広く知られているDBMSで数百ものバグを発見してきました。 SQLancerは、DBMSを自動的にテストする際に、2つの重要な課題に取り組んでいます： 1. テスト入力生成 :...

sandsifter

s a n d s i f t e r : el fuzzer de procesadores x86 Resumen El sandsifter audita procesadores x86 en busca de instrucciones ocultas y errores de hardware, generando sistemáticamente código máquina para explorar el conjunto de instrucciones de un procesador y monitoreando la ejecución en busca de...

Fedora 43 : 7zip (2026-626a028878)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-626a028878 advisory. Some bugs and vulnerabilities were fixed Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Astra Linux – Vulnerability in Firefox

Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs in Firefox 95. Some of these bugs exhibited signs of memory corruption, and we believe that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 114. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 115...