krf

KRF KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...

krf

KRF KRF is a K ernelspace R andomized F aulter. Actualmente soporta los núcleos Linux y FreeBSD. ¿Qué? La inyección de fallos es una técnica de prueba de software que implica inducir fallos "faults" en las funciones llamadas por un programa. Si la función llamada no ha realizado una comprobación ...

Fault-Injection-Finder

Fault Injection Finder root@kitploit: ▄▖ ▜ ▗ ▄▖ ▘ ▗ ▘ ▄▖▘ ▌ ▙▖▀▌▌▌▐ ▜▘ ▐ ▛▌ ▌█▌▛▘▜▘▌▛▌▛▌ ▙▖▌▛▌▛▌█▌▛▘ ▌ █▌▙▌▐▖▐▖ ▟▖▌▌ ▌▙▖▙▖▐▖▌▙▌▌▌ ▌ ▌▌▌▙▌▙▖▌ ▙▌ Geeoon Chung y Nate Snyder Este repositorio es la parte software de nuestro proyecto de ataque por inyección de fallos. Para la parte hardware, consulta...

chaosblade

BLADE AI Languages: 中文 | English Kubernetes chaos-engineering AI agent — describe a fault in plain English or Chinese, no need to memorize CLI flags. BLADE AI is the orchestration layer on top of ChaosBlade: the agent understands intent, runs four-layer safety review, drives the injection, verifi...

phywhispererusb

PhyWhisperer-USB ¿Qué es esto? Es un disparador hardware para FI o SCA, que dispara en el phy USB. ¡Asegúrate de leer también la documentación en http://phywhispererusb.readthedocs.io/! Si estás empezando, hay algunos cuadernos de demostración que muestran cómo: Capturar Datos Transmitir Capturas...

distributed-system-testing

Distributed Systems Testing Skills Two skills for AI coding agents that design and run claim-driven tests for distributed and stateful systems. Together they produce a structured Markdown test plan and a findings report with 10-state verdicts and an explicit SUT / harness / checker / environment...

chaos-mesh

Chaos Mesh is an open source, cloud-native Chaos Engineering platform for Kubernetes. It uses Kubernetes custom resources to define, orchestrate, and observe controlled fault injection against workloads, infrastructure, cloud services, and applications. Chaos Mesh is a Cloud Native Comp...

EUVD-2026-86950

In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write when netfsallocsubrequest fails syzbot reported a null-ptr-deref below 1 following a fault injection in netfsallocsubrequest. 0 When netfsallocsubrequest fails, subreq is NULL. Later, netfspreparewri...

fuzzdb

FuzzDB fue creado para aumentar la probabilidad de encontrar vulnerabilidades de seguridad en aplicaciones mediante pruebas dinámicas de seguridad de aplicaciones. Es el primer y más completo diccionario abierto de patrones de inyección de fallos, ubicaciones predecibles de recursos y expresiones...

fuzztruction

Fuzztruction Fuzztruction es un prototipo académico de un fuzzer que no muta entradas directamente como la mayoría de los fuzzers sino que utiliza una aplicación llamada generadora para producir una entrada para nuestro objetivo de fuzzing. Como los programas que generan datos suelen producir la...

CVE-2026-98119

In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write when netfsallocsubrequest fails syzbot reported a null-ptr-deref below 1 following a fault injection in netfsallocsubrequest. 0 When netfsallocsubrequest fails, subreq is NULL. Later, netfspreparewri...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 es un ataque de fallo controlado por software en procesadores x86. Es el primer ataque que corrompe la integridad de los enclaves SGX. Descripción Todos los procesadores Intel recientes presentan una interfaz de software para controlar los voltajes del núcleo sin...

Starlink-FI

Starlink User Terminal Modchip This repository accompanies the talk titled "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". A slide deck is available here, a recording of the talk should be available soon. The talk covers how we managed to execu...

powerfulseal

PowerfulSeal PowerfulSeal injects failure into your Kubernetes clusters, so that you can detect problems as early as possible. It allows for writing scenarios describing complete chaos experiments. Embrace the inevitable failure. Embrace The Seal. Documentation Please refer to the Powerfulseal...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Quota: Fixed a warning in dqgrab. The following issue occurs during fault injection: WARNING: CPU: 1 PID: 14870 at include/linux/quotaops.h:51 dquotdisable+0x13b7/0x18c0 Modules linked in: CPU: 1 PID: 14870 Comm: fsconfig Not...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ocfs2: removing an entry instead of using null-ptr-dereference in ocfs2xaremove Syzkaller can trigger null-ptr-dereference in ocfs2xaremove: 57.319872 a.out,1161,7:ocfs2xaremove:2028 ERROR: status = -12 57.320420...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: blk-mq: Fixed a possible memory leak when registering the ‘hctx’ variable failed. There is one issue that arises during fault injection tests: An unreferenced object with a size of 512 bytes: bash comm "insmod", pid 308021,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: thermal/core: A memory leak was fixed in thermalcoolingdeviceregister. I encountered a memory leak during the fault injection test. The unreferenced object is: 0xffff888010080000 size: 264312. The details of the memory leak are a...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: brd: Automatic disk creation is deferred until module initialization succeeds. My colleague Wupeng identified the following issues during fault injection: BUG: Unable to handle page faults for address: fffffbfff809d073 PGD:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Regulator: Core – Fixed a resource leak in regulatorregister. I received some reports of resource leaks during fault injection tests: - ERROR: Memory leak; expected refcount 1 instead of 100. - ofnodeget/ofnodeput is unbalance...