gdbfuzz

GDBFuzz：调试器驱动的模糊测试 本文是论文《使用调试器接口模糊测试嵌入式系统》的配套代码。 论文预印本可在此处获取：https://publications.cispa.saarland/3950/。代码允许用户 复现并扩展论文中报告的结果。在报告、复现或扩展结果时，请引用上述论文。 文件夹结构 . ├── benchmark 用于构建 Google 模糊测试套件并运行实验的脚本 ├── dependencies 包含安装 GDBFuzz 依赖项的 Makefile ├── evaluation 论文中呈现的原始实验数据 ├── examplefirmware...

AFL

american fuzzy lop Desarrollado originalmente por Michal Zalewski [email protected]. Consulta QuickStartGuide.txt si no tienes tiempo de leer este archivo. 1 Retos del fuzzing guiado El fuzzing es una de las estrategias más potentes y probadas para identificar problemas de seguridad en...

LibPNG_OSS-Fuzz

Fuzzing y Análisis de Vulnerabilidades de libpng Proyecto de Investigación en Seguridad Grupal Acerca del Fuzzing: El fuzzing es una técnica automatizada de pruebas de software que proporciona datos inválidos, inesperados o aleatorios como entrada a un programa para descubrir errores y...

clusterfuzz v2.39.2

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

wtf v0.5.8

what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...

WuppieFuzz v1.7.1

WuppieFuzz v1.7.1 TNO developed WuppieFuzz, a coverage-guided REST API fuzzer developed on top of LibAFL, targeting a wide audience of end-users, with a strong focus on ease-of-use, explainability of the discovered flaws and modularity. WuppieFuzz supports all three settings of testing black box,...

Coverage-Guided Multi-Agent Harness Generation for Java Library Fuzzing

Coverage-guided fuzzing has proven effective for software testing, but targeting library code requires specialized fuzz harnesses that translate fuzzer-generated inputs into valid API invocations. Manual harness creation is time-consuming and requires deep understanding of API semantics,...

Adobe SDK 1.7.1 2410 Overflow Analysis / Fuzzing Model

This Python script implements a comprehensive framework to model, detect, and analyze integer overflows in 32-bit arithmetic, particularly in the context of image memory allocation. The framework combines formal methods, stepwise arithmetic, symbolic execution, SMT-style constraint solving,...

MulCovFuzz: A Multi-Component Coverage-Guided Greybox Fuzzer for 5G Protocol Testing

As mobile networks transition to 5G infrastructure, ensuring robust security becomes more important due to the complex architecture and expanded attack surface. Traditional security testing approaches for 5G networks rely on black-box fuzzing techniques, which are limited by their inability to...

WuppieFuzz: Coverage-Guided, Stateful REST API Fuzzing

Many business processes currently depend on web services, often using REST APIs for communication. REST APIs expose web service functionality through endpoints, allowing easy client interaction over the Internet. To reduce the security risk resulting from exposed endpoints, thorough testing is...

Design/Logic Flaw

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the deletesdpline function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP...

CVE-2023-28098 OpenSIPS has vulnerability in the Digest Authentication Parser

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function parseparamname . This issue was discovered while performing coverag...