44 matches found
theftfuzzer
root@kitploit: ┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ Introduction: TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations. Usage: python theftfuzzer.py -d 'http://example.com/api/data'...
unicorn
Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...
AFLplusplus
American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.03c Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...
OneListForAll
OneListForAll Listas de palabras para fuzzing web: micro curada, short/long categorizadas, y listas finales combinadas. Qué genera este repositorio onelistforallmicro.txt: lista curada mantenida manualmente. dict/short.txt: lista de palabras por categoría curada fuentes pequeñas/de calidad...
struts_rest_rce_fuzz-CVE-2017-9805-
This repository does not have a README...
pFuzz
What is pFuzz / pFuzz Nedir ❓ pFuzz is an advanced red teaming fuzzing tool which we developed for our research. It helps us to bypass web application firewall by using different methods at the same time. pFuzz web uygulama araştırmaları için geliştirdiğimiz, gelişmiş bir fuzzing aracıdır. Farklı...
XSSFuzzer
XSS Fuzzer XSS Fuzzer is a simple application written in plain HTML/JavaScript/CSS which generates XSS payloads based on user-defined vectors using multiple placeholders which are replaced with fuzzing lists. It offers the possibility to just generate the payloads as plain-text or to execute them...
fuzz-wooyun-org
fuzz-wooyun-org WooYun Fuzz Library...
applepie
applepie, una implementación de hipervisor para Bochs ¡Hola! ¡Bienvenido a applepie! Esta es una herramienta diseñada para fuzzing, introspección y encontrar errores. Es un hipervisor que utiliza la API de Windows Hypervisor Platform presente en versiones recientes de Windows específicamente, fue...
fuzzilli
Fuzzilli Un fuzzer guiado por cobertura para intérpretes de lenguajes dinámicos basado en un lenguaje intermedio personalizado "FuzzIL" que puede ser mutado y traducido a JavaScript. Uso Los pasos básicos para usar este fuzzer son: 1. Descarga el código fuente de uno de los motores JavaScript...
backfuzz
Installation: git clone https://github.com/localh0t/backfuzz Follow Medium / Twitter: @localh0t...
honggfuzz
Honggfuzz 一个面向安全、反馈驱动、进化式的模糊测试工具。 Honggfuzz 是一个通用型模糊测试工具,利用代码覆盖率(软件和硬件层面)来发现漏洞。它支持多进程、多线程,并支持持久化模糊测试以实现极高的执行速度。 主要特性 快速 :多进程、多线程引擎,充分发挥 CPU 的完整潜力。 持久化模糊测试 :直接在进程内测试 API,迭代速度可达每秒 100 万次。 反馈驱动 :利用硬件(Intel BTS/PT)和软件代码覆盖率来进化输入。 易用 :可以从空的语料库开始,自动构建有效的输入集合。 深度监控 :使用底层 API(ptrace)来检测被劫持的信号和隐藏的崩溃。 广泛支持...
cargo-fuzz
cargo fuzz 一个用于通过libFuzzer 进行模糊测试的 cargo 子命令!易于使用! 安装 root@kitploit: $ cargo install cargo-fuzz 注意:libFuzzer 需要 LLVM sanitizer(消毒器)支持,因此仅适用于 x86-64 和 Aarch64 架构,并且仅适用于类 Unix 操作系统(不适用于 Windows)。此外,由于使用了一些不稳定的命令行标志,它还需要 nightly 版本编译器。你还需要一个支持 C++11 的 C++ 编译器。 用法 cargo fuzz init 为你的 crate 初始化一个 carg...
domato
Domato 🍅 一个 DOM 模糊测试器 由 Ivan Fratric 编写和维护,[email protected] 版权所有 2017 Google Inc. 保留所有权利。 根据 Apache 许可证 2.0 版(“许可证”)获得许可; 除非遵守许可证,否则您不得使用此文件。 您可以在以下位置获取许可证副本: root@kitploit: http://www.apache.org/licenses/LICENSE-2.0 除非适用法律要求或书面同意,否则按“原样”分发软件, 不附带任何明示或暗示的保证或条件。 请参阅许可证,了解管理权限和限制的具体语言。 使用方法...
ICSFuzz
ICSFuzz: Fuzzing Tool for ICS Control Applications Overview ICSFuzz is an PLC-side fuzzing tool for uncovering vulnerabilities in ICS control applications by Dimitris Tychalas @ditihala .. @ditihala: https://www.twitter.com/ditihala Installation The tool requires an already existing cross...
FDsploit
A File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool. FDsploit menu: root@kitploit: $ python fdsploit.py -h | | \ | ||| | | | | | -| . | | . | | | || |/|| ||||| ||...ver. 1.2 Author: Christoforos Petrou game0ver ! usage: fdsploit.py -u | -f -h -p -d -e 0,1,2 -t -b -x -c...
httpfuzz-robomiller
httpfuzz-robomiller Dumb Fuzzer used to find CVE-2010-1411 based on cmiller-csw-2010.pdf Babysitting an Army of Monkeys https://fuzzinginfo.files.wordpress.com/2012/05/cmiller-csw-2010.pdf...
AFLplusplus v5.03c
American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.03c Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...