Cartographer

Cartographer 绘制代码覆盖率 由 Austin Peavy 开发 - https://github.com/aus10pv 由 NCC Group Plc 以开源形式发布 - https://www.nccgroup.com/ 根据 Apache 2.0 许可证发布（更多信息请参阅 LICENSE） 描述 Cartographer 是适用于 Ghidra 的代码覆盖率映射插件，使研究人员无需源代码即可观察程序中哪些部分已被执行。 目录 主要功能 安装 加载插件 使用方法 加载代码覆盖率文件 代码覆盖率详细信息 在覆盖率之间切换 表达式解析器 语法 示例 贡献 从源代码构建 报...

paimei

PaiMeiは、複数の拡張可能なコンポーネントから構成されるリバースエンジニアリングフレームワークです。このフレームワークは、本質的にリバースエンジニアのスイスアーミーナイフと見なすことができ、ファジング支援、コードカバレッジ追跡、データフロー追跡など、静的および動的な幅広いタスクに対してすでにその有効性が実証されています。 詳細については、docs\index.htmlを参照してください。...

honggfuzz

Honggfuzz 一个面向安全、反馈驱动、进化式的模糊测试工具。 Honggfuzz 是一个通用型模糊测试工具，利用代码覆盖率（软件和硬件层面）来发现漏洞。它支持多进程、多线程，并支持持久化模糊测试以实现极高的执行速度。 主要特性 快速 ：多进程、多线程引擎，充分发挥 CPU 的完整潜力。 持久化模糊测试 ：直接在进程内测试 API，迭代速度可达每秒 100 万次。 反馈驱动 ：利用硬件（Intel BTS/PT）和软件代码覆盖率来进化输入。 易用 ：可以从空的语料库开始，自动构建有效的输入集合。 深度监控 ：使用底层 API（ptrace）来检测被劫持的信号和隐藏的崩溃。 广泛支持...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

minder

| | | | | インストール | ドキュメント | リリース Minderとは？ Minderは、開発チームやオープンソースコミュニティがよりセキュアなソフトウェアを構築し、構築したものが安全であることを証明するためのオープンソースプラットフォームです。Minderは、ソフトウェアサプライチェーンに沿ったリスクを最小限に抑えるための一連のチェックとポリシーを提供し、プロジェクトオーナーがセキュリティ体制を積極的に管理し、下流の消費者に自らのセキュリティ慣行を証明することを支援します。...

EhTrace

EhTrace EhTrace （「エートレース」と発音）は、Windows向けの高性能バイナリトレーシング＆インストゥルメンテーションフレームワークです。ソースコード、バイナリの変更、従来のデバッグを必要とせずに、Windows実行ファイルの深いランタイム解析を可能にします。 概要 EhTraceは、WindowsのVectored Exception...

revsync

revsync Plugin de sincronización en tiempo real para IDA Pro, Binary Ninja y Vivisect Sincroniza: Comentarios Nombres de símbolos Nombres de variables de pila Estructuras Cobertura de código cuánto tiempo se pasó mirando un bloque Instalación de IDA Pro Primero, clona al directorio de datos de ID...

Astra Linux – Vulnerability in phpunit

PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52, involving unsafe deserialization of code coverage data during PHPT test executions. The vulnerability resides in the cleanupForCoverage method, which...

wtf v0.5.8

what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...

gha-lab-227431b300

Kiwi TCMS - Open-Source-Testmanagement .. image:: https://img.shields.io/docker/pulls/kiwitcms/kiwi :target: https://kiwitcms.readthedocs.io/en/latest/installingdocker.html :alt: Downloads from Docker Hub .. image:: https://readthedocs.org/projects/kiwitcms/badge/?version=latest :target:...

[SECURITY] Fedora 43 Update: perl-Devel-Cover-1.51-4.fc43

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

[SECURITY] Fedora 44 Update: perl-Devel-Cover-1.52-4.fc44

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: The KCOV instrumentation is disabled after the loadsegments function is called. The loadsegments function modifies segment registers, invalidating the GS base—something that KCOV relies on for per-cpu data. When...

CVE-2026-43331

Summary of details (CVE-2026-43331): In the Linux kernel, a KCOV instrumentation issue in the x86/kexec path is resolved by disabling KCOV for the affected areas. The root cause is that load_segments() changes segment registers and invalidates the GS base KCOV relies on for per-CPU data, causing ...

[SECURITY] Fedora 42 Update: perl-Devel-Cover-1.44-7.fc42

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

CVE-2026-32805

CVE-2026-32805 corresponds to an Archive Slip flaw in Romeo’s webserver sanitization (github.com/ctfer-io/romeo/webserver). The root cause is a missing trailing path separator in the strings.HasPrefix check within sanitizeArchivePath, enabling a crafted tar to traverse outside the intended destin...

CVE-2026-32805 Romeo is vulnerable to Archive Slip due to missing checks in sanitization

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.2, the sanitizeArchivePath function in webserver/api/v1/decoder.go lines 80-88 is vulnerable to a path...

CVE-2026-32805

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.2, the sanitizeArchivePath function in webserver/api/v1/decoder.go lines 80-88 is vulnerable to a path...

CVE-2026-32737

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from the "hardened" namespace to any Pod...

Romeo 路径遍历漏洞

Romeo is an open-source Go application code coverage calculation tool developed by CTFer.io. Versions of Romeo prior to 0.2.2 contained a path traversal vulnerability. This vulnerability stemmed from defects in the path traversal checks, which could lead to arbitrary file writing...