58 matches found
fuzzuf
fuzzuf fuzzuf fuzz ing u nification f ramework — это фреймворк для фазинга с собственным DSL для описания цикла фазинга путём сборки строительных блоков примитивов фазинга. Инструкции по сборке и учебное пособие см. в building.md и tutorial.md. Зачем использовать fuzzuf? fuzzuf позволяет гибко...
boofuzz
.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: логотип boofuzz boofuzz: Фаззинг сетевых протоколов для людей .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...
apatchy
apatchy Apache HTTPD를 위한 인프로세스 퍼징 프레임워크 apatchy를 사용하면 네트워크 I/O 없이 Apache의 전체 HTTP 요청 처리 파이프라인파싱, 훅, 필터, 핸들러을 퍼징할 수 있습니다. Apache의 소켓 계층을 사용자 정의 I/O 필터로 교체하여 실제 HTTP 트래픽을 처리하는 것과 동일한 코드 경로에 원시 바이트를 직접 공급합니다. 기능 다양한 빌드 트리 및 구성 관리 커버리지 리포트 생성 사용자 정의 인트로스펙션: LLVM 콜 트리 분석 Harness 및 Proto 뮤테이터 관리자 버그 분류...
PyJFuzz
PyJFuzz — это небольшая, расширяемая и готовая к использованию среда для фаззинга JSON-входных данных , таких как REST API мобильных конечных точек, реализации JSON, браузеры, CLI-исполняемые файлы и многое другое...
Binvariants
Binvariants: Фаззинг бинарных файлов, управляемый инвариантами на уровне регистров Этот репозиторий содержит исходный код Binvariants : прототипа фреймворка для фаззинга, который использует нарушения вероятных инвариантов на уровне регистров для фаззинга бинарных файлов. Эта работа представлена в...
fuzzable
Fuzzable Фреймворк для автоматизации Fuzzable поиска целей с помощью статического анализа Введение Исследователи уязвимостей, проводящие оценку безопасности программного обеспечения, часто используют возможности фаззинга с покрытием кода с помощью мощных инструментов, таких как AFL++ и libFuzzer...
kitty
Введение | Салли: Бу? | Бу: Кис-кис! Что такое Kitty? Kitty — это модульный и расширяемый фреймворк для фаззинга с открытым исходным кодом, написанный на Python, вдохновлённый Sulley от OpenRCE и Peach Fuzzer от Michael Eddington ныне Deja Vu Security. Цель root@kitploit: Когда мы начинали писать...
kitty
Introduction | Sulley: Boo? | Boo: Kitty! What is Kitty? Kitty is an open-source modular and extensible fuzzing framework written in python, inspired by OpenRCE's Sulley and Michael Eddington's and now Deja Vu Security's Peach Fuzzer . Goal root@kitploit: When we started writing Kitty, our goal w...
vUSBf
vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / / / / / / / / // / / // // / / // ,/ ///// KVM/QEMU 기반 USB 퍼징 프레임워크. Sergej Schumilo, OpenSource Security Spenneberg 2015 버전: 0.2...
hyperpom
HYPERPOM Apple Silicon Hypervisor 기반 AArch64 퍼징 라이브러리 목차 면책 조항 시작하기 사전 요구 사항 자체 서명 바이너리 및 Hypervisor 자격 컴파일 워크플로우 문서 예제 테스트 실행 작성자 Hyperpom은 Apple Silicon Hypervisor 위에 구축된 커버리지 기반 변이 퍼징 프레임워크입니다. AArch64 유저랜드 바이너리를 쉽게 계측하고 퍼징할 수 있도록 설계되었습니다. ⚠️ 면책 조항 이 프로젝트의 아이디어는 Apple Silicon의 기능을 활용하는 효율적이고 빠른...
certfuzz
Этот проект содержит исходный код для CERT Basic Fuzzing Framework BFF BFF для Windows ранее был известен как CERT Failure Observation Engine FOE. Если вы ищете исполняемый код, загрузите последние версии по адресу: BFF Использование этого кода В зависимости от предпочитаемого уровня сложности и...
UBUNTU-CVE-2026-64326
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
EUVD-2026-48870
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
ExploitMind
ExploitMind Overview ExploitMind is an en...
TEMPLATEFUZZ: Fine-Grained Chat Template Fuzzing for Jailbreaking and Red Teaming LLMs
Large Language Models LLMs are increasingly deployed across diverse domains, yet their vulnerability to jailbreak attacks, where adversarial inputs bypass safety mechanisms to elicit harmful outputs, poses significant security risks. While prior work has primarily focused on prompt injection...
Not All Tokens Are Created Equal: Query-Efficient Jailbreak Fuzzing for LLMs
Large Language ModelsLLMs are widely deployed, yet are vulnerable to jailbreak prompts that elicit policy-violating outputs. Although prior studies have uncovered these risks, they typically treat all tokens as equally important during prompt mutation, overlooking the varying contributions of...
DyMA-Fuzz: Dynamic Direct Memory Access Abstraction for Re-Hosted Monolithic Firmware Fuzzing
The rise of smart devices in critical domains--including automotive, medical, industrial--demands robust firmware testing. Fuzzing firmware in re-hosted environments is a promising method for automated testing at scale, but remains difficult due to the tight coupling of code with a...
BGPFuzz: Automated Configuration Fuzzing of the Border Gateway Protocol
Telecommunications networks rely on configurations to define routing behavior, especially in the Border Gateway Protocol BGP, where misconfigurations can lead to severe outages and security breaches, as demonstrated by the 2021 Facebook outage. Unlike existing approaches that rely on synthesis or...
PBFuzz: Agentic Directed Fuzzing for PoV Generation
Proof-of-Vulnerability PoV input generation is a critical task in software security and supports downstream applications such as path generation and validation. Generating a PoV input requires solving two sets of constraints: 1 reachability constraints for reaching vulnerable code locations, and ...
ThreadFuzzer: Fuzzing Framework for Thread Protocol
With the rapid growth of IoT, secure and efficient mesh networking has become essential. Thread has emerged as a key protocol, widely used in smart-home and commercial systems, and serving as a core transport layer in the Matter standard. This paper presents ThreadFuzzer, the first dedicated...