vUSBf

vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / / / / / / / / // / / // // / / // ,/ ///// A KVM/QEMU based USB-fuzzing framework. Sergej Schumilo, OpenSource Security Spenneberg...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Desbordamiento de búfer en Seattle Lab Mail SLmail 5.5 - POP3 Desbordamiento de búfer simple basado en pila, paso a paso 1 FUZZEAR la Aplicación En el primer paso, aplicaremos fuzzing a la aplicación con un simple script de Spike mientras tanto, también tendremos SLmail adjun...

dns_client_fuzzing

Fuzzing the Microsoft Windows DNS client After the critical vulnerability of CVE-2026-41096 was discovered, I decided to take a crack at this...

godirb

godirb Fast, modern directory, file, port and FUZZ brute-forcer written in Go. Built for quick scans where you want a modern dirb-like tool: run it, get useful results, tune the obvious flags, and avoid dragging a full fuzzing framework into a simple job. 📦 Installation Go root@kitploit: go insta...

endsfuzzer

endsfuzzer endsfuzzer is a simple tool used to fuzz a list of domains for specific endpoints. It will check all the domains in a list for a single endpoint, then moves on to the next endpoint to check for. Features Fast. Makes use of go routines. Gentler to servers. Fuzzes all hosts for one...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...

py-log4shellscanner

PY-Log4ShellScanner A simple, one-file DNSLog server with HTTP endpoint for log retrieval Credit Based on the Log4jScanner by fullhunt.io, modified with multithreading and custom DNS Callback server Features Support for lists of URLs Fuzzing for more than 60 HTTP request headers, with ability to...

sfuzz

SFUZZ Start date: Dec, 2021 This is a coverage-guided, emulation based greybox fuzzer that makes use of a custom Just-In-Time compiler to achieve near-native performance. It works by lifting RISC-V elf binaries to an intermediate representation before JIT compiling them to x86 during execution...

vendor-android-cves

vendor-android-cves Collections of our POCs/fuzzing scripts/harness for vendor android CVEs, including those on BlackHat ASIA 2022: https://www.blackhat.com/asia-22/briefings/schedule/the-hidden-rce-surfaces-that-control-the-droids-26083 Update: I've received news about the SMT exploit in this...

CVE-2025-5548

🛠️ Environment Setup Target platform: Windows This guide details all the tools required to perform vulnerability analysis and fuzzing of the binary. Follow the steps in order to ensure everything is set up correctly. 🐍 Python 3 Download: python.org/downloads/windows Python 3 is the language we wil...

api_wordlist

apiwordlist A wordlist of API names used for fuzzing web application APIs. Contents apiseeninwild.txt - This contains API function names I've seen in the wild. actions.txt - All API function name verbs objects.txt - All API function name nouns actions-uppercase.txt - API function name verbs with...

CVE-2023-4863-

CVE-2023-4863 Triggering the famous libweb 0day vuln with libfuzzer...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

LFI-Destruction

🔥 LFI-Destruction – 授权渗透测试框架 LFI-Destroyer 是一个全面的、模块化的本地文件包含（LFI）利用框架，专为授权的安全专业人员设计。它将多种攻击技术整合到一个易于使用的工具中： SSH 与浏览器制品模糊测试 – 在 Linux 和 Windows 上搜索 SSH 密钥、Putty PPK、WinSCP、FileZilla、Firefox、Chrome、Edge 和 Brave 凭据。 日志投毒 → 反弹 Shell – 通过可写日志文件自动实现 RCE，支持自定义 payload。 phpinfo 条件竞争 RCE – 当 fileuploads=On...

reproducer-poc-CVE-2022-0847

Naive detector and reproducer of CVE-2022-0847 dirty pipe. Uses simple generator of syscall sequences / programs from purposefully limited set of building blocks / input values only generation, no advanced fuzzing; no mutation; no coverage guidance; no shrinking / minimization and detects...

windows_tcpip_fuzz

windowstcpipfuzz This is my attempt at fuzzing the tcpip.sys driver in windows via using scapy. This is inspired by this vulnerability here: https://doar-e.github.io/blog/2021/04/15/reverse-engineering-tcpipsys-mechanics-of-a-packet-of-the-death-cve-2021-24086/...

SockFuzzer

SockFuzzer: XNU Kernel Fuzzing Framework Project Status SockFuzzer, originally designed as a networking-focused fuzzer for the XNU kernel used in macOS and iOS, has evolved into a comprehensive kernel fuzzing framework. While retaining its original name as a nod to its roots, SockFuzzer now cover...

hyperpom

HYPERPOM AArch64 fuzzing library based on the Apple Silicon hypervisor Table of contents Disclaimer Getting Started Prerequisites Self-Signed Binaries and Hypervisor Entitlement Compilation Workflow Documentation Examples Running the Tests Authors Hyperpom is a coverage-guided mutation-based...

fuzzing-templates

Plantillas de Fuzzing Lista curada por la comunidad de plantillas de fuzzing para el motor nuclei para encontrar vulnerabilidades de seguridad desconocidas. Documentación • Contribuciones • Discusión • Comunidad !Caution Este repositorio está archivado y fusionado en el proyecto nuclei-templates...

fuzzing-templates

Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Documentation • Contributions • Discussion • Community !Caution This repository is archived and merged into nuclei-templates project under /dast directory. Fuzzing templat...