centipede

Centipede - a distributed fuzzing engine. Work-in-progress. Why Centipede Why not? We are currently trying to fuzz some very large and very slow targets for which libFuzzer, AFL, and the like do not necessarily scale well. For one of our motivating examples see SiliFuzz. While working on Centiped...

efcf-framework

EF/CF - the Extremely Fast ethereum smart Contract Fuzzer EF/CF is a new approach to smart contract fuzzing: instead of using a new custom built fuzzer, it repurposes existing fuzzing infrastructure of C/C++ code to smart contracts. Currently, AFL++ is the primarily supported fuzzer, although the...

snapchange

Snapchange Lightweight fuzzing of a memory snapshot using KVM Snapchange provides the ability to load a raw memory dump and register state into a KVM virtual machine VM for execution. At a point in execution, this VM can be reset to its initial state by resetting the dirty pages found by KVM or...

gori

ターミナルからハックする。 インストール • 使い方 • ドキュメント • コントリビュート gori （고리 — 韓国語で リング、リンク、ループ ）は、クライアントとそのターゲットの間のループに位置し、 すべてのリクエストとレスポンスを フロー としてキャプチャします。これをリプレイ、ファズ、スキャンでき、 HTTP/1.1、HTTP/2、WebSocket、gRPC、SSE を横断して利用でき、HTTP/1.1 と HTTP/2 では通信中のインターセプトも可能です。 複数のサーフェスにまたがる中核の評価アクションは同じエンジンを使用し、それらのワークフローは gori run と...

fuzzing

Fuzzing Forum This project aims at hosting tutorials, examples, discussions, research proposals, and other resources related to fuzzing. External contributions are welcome, please see CONTRIBUTING file for more info. Documentation Why fuzz? Introduction to fuzzing What makes a good fuzz target Ho...

ghidralligator

Ghidralligator Ghidralligator is a C++ multi-architecture pcode emulator based on the Ghidra libsla, designed for fuzzing with AFL++. It allows performing emulation-based fuzzing while keeping interesting performances when dealing with binaries running on exotic architectures. Its extensible natu...

Melkor_ELF_Fuzzer

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- - | -- DESCRIPTION -- | - -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- - Melkor - An ELF File Format Fuzzer Melkor, a fictional character from J. R. R. Tolkien's Middle-earth legendarium, was the first Dark Lord and master of Sauron. He's mentioned...

fuzz.txt

fuzz.txt There's Nothing so Permanent as Temporary Any ideas?...

Presentations

プレゼンテーション 2025 CodeBlue 2025 - 2025年11月18日〜19日 AIで加速するエクスプロイト：DSPコプロセッサからMTE対応Pixelを侵害する 発表者：PAN Zhenpeng & Billy JHENG Bing Jhong Exynosコプロセッサと踊る：楽しみと「利益」のためにSamsungをPwnする 発表者：Muhammad Ramdhan, PAN Zhenpeng & Billy JHENG Bing Jhong HITCON 2025 - 2025年8月15日〜16日 Pixel 8をクラックする：未公開DSPを悪用してMTEをバイパスす...

BurpSuite-For-Pentester

🕷️ BurpSuite for Pentester A practical Burp Suite cheat sheet and learning guide designed for bug bounty hunters and penetration testers to efficiently discover web application vulnerabilities from low severity P4 to critical P1 using Burp Suite. This repository provides a structured reference for...

silifuzz

SiliFuzz - Fuzzing CPUs by proxy What is SiliFuzz SiliFuzz is a system that finds CPU defects by fuzzing software proxies, like CPU simulators or disassemblers, and then executing the accumulated test inputs known as the corpus on actual CPUs on a large scale. SiliFuzz is a work in progress, plea...

API-Wordlist

apiwordlist A wordlist of API names used for fuzzing web application APIs. Contents apiseeninwild.txt - This contains API function names I've seen in the wild. actions.txt - All API function name verbs objects.txt - All API function name nouns actions-uppercase.txt - API function name verbs with...

PoC

Pedro Ribeiro @pedrib Exploit Dumping Grounds This repository contains information, exploits, scripts, etc, that I have made public and it is located at https://github.com/pedrib/PoC. advisories: all my public advisories, research notes, etc Pwn2Own: advisories related to my Pwn2Own participation...

FDsploit

A File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool. FDsploit menu: $ python fdsploit.py -h | | \ | ||| | | | | | -| . | | . | | | || |/|| ||||| ||...ver. 1.2 Author: Christoforos Petrou game0ver ! usage: fdsploit.py -u | -f -h -p -d -e 0,1,2 -t -b -x -c -v --params...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

urh

Universal Radio HackerURH는 많은 일반적인 소프트웨어 정의 라디오를 기본 지원하는 무선 프로토콜 조사를 위한 완전한 제품군입니다. URH는 신호의 쉬운 복조를 가능하게 하며, 자동 변조 매개변수 탐지 기능과 결합되어 공중을 통해 날아다니는 비트와 바이트를 식별하는 것을 쉽게 만듭니다. 데이터는 전송 전에 종종 인코딩되므로, URH는 CC1101 데이터 화이트닝과 같은 정교한 인코딩도 해독할 수 있는 사용자 정의 가능한 디코딩을 제공합니다. 프로토콜 리버스 엔지니어링에 관해서, URH는 두 가지 방식으로 도움...

urh

The Universal Radio Hacker URH is a complete suite for wireless protocol investigation with native support for many common Software Defined Radios. URH allows easy demodulation of signals combined with an automatic detection of modulation parameters making it a breeze to identify the bits and byt...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

certfuzz

This project contains the source code for the CERT Basic Fuzzing Framework BFF BFF for Windows was formerly known as the CERT Failure Observation Engine FOE. If you are looking for runnable code, you should download the latest releases at: BFF Using this code Depending on your preferred level of...

kemon

Kemon macOS 커널 모니터링을 위한 오픈 소스 사전 및 사후 콜백 기반 프레임워크. 속보 - 08/28/2019 macOS Catalina 10.15 Beta 7 릴리스 노트 https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes 엔드포인트 보안 kauth API가 제거되었습니다. 50419013 / 테스트 결과, 이러한 Kauth 인터페이스는 실제로 제거되지 않았으며 Kemon이 여전히 작동합니다. 하지만...