Fault-Injection-Finder

Fault Injection Finder root@kitploit: ▄▖ ▜ ▗ ▄▖ ▘ ▗ ▘ ▄▖▘ ▌ ▙▖▀▌▌▌▐ ▜▘ ▐ ▛▌ ▌█▌▛▘▜▘▌▛▌▛▌ ▙▖▌▛▌▛▌█▌▛▘ ▌ █▌▙▌▐▖▐▖ ▟▖▌▌ ▌▙▖▙▖▐▖▌▙▌▌▌ ▌ ▌▌▌▙▌▙▖▌ ▙▌ Geeoon Chung y Nate Snyder Este repositorio es la parte software de nuestro proyecto de ataque por inyección de fallos. Para la parte hardware, consulta...

fuzzdb

FuzzDB fue creado para aumentar la probabilidad de encontrar vulnerabilidades de seguridad en aplicaciones mediante pruebas dinámicas de seguridad de aplicaciones. Es el primer y más completo diccionario abierto de patrones de inyección de fallos, ubicaciones predecibles de recursos y expresiones...

chaosblade

Chaosblade: un kit de ingeniería del caos fácil de usar y potente 中文版 README Wiki: DeepWiki 🔥🔥🔥 ACTUALIZACIÓN IMPORTANTE: Lanzamiento de Chaosblade Agent - Blade AI Blade AI actúa como la capa de agente inteligente dentro del ecosistema ChaosBlade: en el nivel fundamental, invoca a ChaosBlade par...

fuzztruction

Fuzztruction Fuzztruction 是一个学术原型模糊测试器，它不直接突变输入（像大多数模糊器那样），而是使用所谓的生成器（generator）应用程序来为我们的模糊测试目标生成输入。由于生成数据的程序通常会产生正确的表示形式，我们的模糊器通过注入故障来 突变 生成器程序，从而使生成的数据 几乎 有效。理想情况下，生成的数据能通过我们的模糊测试目标（称为 消费者 ）的解析阶段，但在更深层的程序逻辑中触发意外行为。这使得甚至可以对使用加密原语（如加密或消息完整性码）的目标进行模糊测试。我们方法的主要优势在于，它无需重量级程序分析技术、语法近似或人工干预就能生成复杂数据。...

phywhispererusb

PhyWhisperer-USB 这是什么东西？这是一个针对USB物理层（USB phy）进行故障注入（FI）或侧信道攻击（SCA）的硬件触发器。请务必阅读文档：http://phywhispererusb.readthedocs.io/ ！ 如果你刚开始使用，这里有几个演示笔记本，展示了如何： 嗅探数据 流式传输更长的捕获 在数据包上触发 获取 PhyWhisperer-USB 请查看 https://www.crowdsupply.com/newae/phywhisperer-usb 了解众筹供应！ 照片 与其他项目的对比 什么是...

distributed-system-testing

Distributed Systems Testing Skills Two skills for AI coding agents that design and run claim-driven tests for distributed and stateful systems. Together they produce a structured Markdown test plan and a findings report with 10-state verdicts and an explicit SUT / harness / checker / environment...

chaos-mesh

Chaos Mesh es una plataforma de ingeniería del caos de código abierto y nativa de la nube para Kubernetes. Utiliza recursos personalizados de Kubernetes para definir, orquestar y observar la inyección controlada de fallos contra cargas de trabajo, infraestructura, servicios en la nube y...

krf

KRF KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...

krf

KRF KRF 是一个内 核态随 机错 误注入器。 目前支持 Linux 和 FreeBSD 内核。 是什么？ 故障注入 是一种软件测试技术，通过在被测程序所调用的函数中诱发失败（“故障”）来工作。如果被调用方未能进行正确的错误检查和处理，这些故障可能导致不可靠的应用行为或可被利用的漏洞。 与现有的许多用户态故障注入系统不同，KRF 通过加载的内核模块在内核态运行。这有几个优点： 它适用于静态链接的二进制文件，因为不依赖 LDPRELOAD 进行注入。 由于它拦截的是原始的系统调用而非它们的 libc 包装函数，因此可以注入通过 syscall3 或内联汇编发起的调用。 它可能比使用...

kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on arm64 architectures. This vulnerability occurs because certain page table walk operations, used in fault injection and Address Translation AT emulation, do not properly acquire a Sleepable Read-Copy Update...

v0ltpwn

V0LTpwn V0LTpwn（CVE-2019-11157）是一种针对 x86 处理器的软件控制故障攻击。它是首个破坏 SGX 飞地完整性的攻击。 描述 所有近期英特尔处理器均提供一种无需重启系统即可控制核心电压的软件接口。该功能并非正常运行所必需，但被专业用户用于性能优化。例如，超频社区中的英特尔 XTU 应用程序便使用了该接口。 在 V0LTpwn 中，我们展示了恶意软件可利用此接口将处理器电压降低至临界阈值，此时某些指令将无法正确运行。这意味着攻击者能够在使用这些指令实现的计算中诱发比特翻转。我们在论文中展示了攻击者如何操纵加密计算，甚至改变程序的控制流。...

Starlink-FI

Starlink User Terminal Modchip This repository accompanies the talk titled "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". A slide deck is available here, a recording of the talk should be available soon. The talk covers how we managed to execu...

powerfulseal

PowerfulSeal PowerfulSeal inyecta fallos en tus clústeres de Kubernetes para que puedas detectar problemas lo antes posible. Permite escribir escenarios que describen experimentos de caos completos. Acepta el fallo inevitable. Acepta al Sello. Documentación Consulta la documentación de Powerfulse...

CVE-2026-80616

A flaw was found in the Linux kernel's ieee802154 component. An unnecessary warning message WARNON can be triggered when memory allocation fails in the cfg802154switchnetns function. This can lead to diagnostic messages being logged due to deliberate fault injections, but does not pose a direct...

SUSE CVE-2026-80616

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

CVE-2026-80616

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

CVE-2026-80665

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

CVE-2026-80616

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

UBUNTU-CVE-2026-80616

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

EUVD-2026-67492

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...