godirb

godirb Fast, modern directory, file, port and FUZZ brute-forcer written in Go. Built for quick scans where you want a modern dirb-like tool: run it, get useful results, tune the obvious flags, and avoid dragging a full fuzzing framework into a simple job. 📦 Installation Go go install...

endsfuzzer

endsfuzzer endsfuzzer 는 특정 엔드포인트에 대해 도메인 목록을 퍼징하는 간단한 도구입니다. 목록에 있는 모든 도메인에 대해 하나의 엔드포인트를 확인한 후, 다음 엔드포인트로 넘어가 확인합니다. 기능 빠름. Go 루틴을 활용합니다. 서버에 부담이 적음. 한 번에 하나의 엔드포인트에 대해 모든 호스트를 퍼징합니다. 철저함. HTTPS 포트 443와 HTTP 포트 80를 확인합니다. 설치 endsfuzzer 는 실행을 위해 Golang이 필요합니다. go get -u...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...

py-log4shellscanner

PY-Log4ShellScanner 간단한 단일 파일 DNSLog 서버로, 로그 검색을 위한 HTTP 엔드포인트를 제공합니다. 크레딧 fullhunt.io의 Log4jScanner를 기반으로 하여, 멀티스레딩 및 사용자 지정 DNS 콜백 서버로 수정하였습니다. 기능 URL 목록 지원 60개 이상의 HTTP 요청 헤더에 대한 퍼징, 사용자 정의 헤더 추가 기능 HTTP POST 데이터 매개변수 퍼징 JSON 데이터 매개변수 퍼징 멀티스레드 검색 자체 호스팅 scheibling/py-dnslogserver를 통한 DNS 콜백 WA...

sfuzz

SFUZZ 開始日: 2021年12月 これは、カスタム Just-In-Time コンパイラを利用してネイティブに近いパフォーマンスを実現する、カバレッジ誘導型・エミュレーションベースのグレーボックスファザーです。RISC-V ELF バイナリを中間表現にリフティングし、実行中に JIT コンパイルして x86 へ変換することで動作します。JIT コンパイル中にコードが計測され、カバレッジ追跡、asan、cmpcov、スナップショットベースのファジングなどのファジング改善機能が有効になります。 特徴 マルチスレッド対応。任意の数のスレッドをサポートし、ほぼ線形にスケーリングします。...

vendor-android-cves

vendor-android-cves ベンダー製Android CVE用のPOC/ファジングスクリプト/ハーネスのコレクション。BlackHat ASIA 2022で発表されたものも含みます: https://www.blackhat.com/asia-22/briefings/schedule/the-hidden-rce-surfaces-that-control-the-droids-26083 更新:...

CVE-2025-5548

🛠️ 환경 설정 대상 플랫폼: Windows 이 가이드는 바이너리의 취약점 분석 및 퍼징을 수행하는 데 필요한 모든 도구를 자세히 설명합니다. 모든 것이 올바르게 설정되도록 순서대로 단계를 따르십시오. 🐍 Python 3 다운로드: python.org/downloads/windows Python 3는 퍼징 스크립트 를 작성하는 데 사용할 언어입니다. 단순성과 풍부한 생태계 덕분에 대상 바이너리에 페이로드를 전달하고, 네트워크 연결을 처리하며, 응답을 처리하는 작업을 자동화하는 데 이상적입니다. 설치: 링크에서 .exe 설치...

api_wordlist

apiwordlist WebアプリケーションAPIのファジングに使用するAPI名のワードリストです。 内容 apiseeninwild.txt - 実際に野良で見かけたAPI関数名が含まれています。 actions.txt - すべてのAPI関数名の動詞 objects.txt - すべてのAPI関数名の名詞 actions-uppercase.txt - 先頭文字が大文字のAPI関数名の動詞 actions-lowercase.txt - 先頭文字が小文字のAPI関数名の動詞 objects-uppercase.txt - 先頭文字が大文字のAPI関数名の名詞...

CVE-2023-4863-

CVE-2023-4863 libfuzzer로 유명한 libweb 제로데이 취약점을 트리거하기...

GHSA-JPF4-98QJ-QR67 Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

A vulnerability in Nuclei's DAST template loading path allows unsigned code: protocol templates to execute, bypassing the cryptographic signature requirement that is meant to prevent arbitrary command execution from untrusted templates. Affected Component The issue is in the template loader's DAS...

Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

A vulnerability in Nuclei's DAST template loading path allows unsigned code: protocol templates to execute, bypassing the cryptographic signature requirement that is meant to prevent arbitrary command execution from untrusted templates. Affected Component The issue is in the template loader's DAS...

clusterfuzz v2.40.2

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

suricata suricata-8.0.7

Suricata Introduction Suricata is a network IDS, IPS and NSM engine developed by the OISF and the Suricata community. Resources Home Page Bug Tracker User Guide Dev Guide Installation Guide User Support Forum Contributing We're happily taking patches and other contributions. Please see our...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Added a NULL check in BE reparenting. A NULL check was also added to the dpcmbereparent API, to handle kernel NULL pointer dereferencing errors. This issue occurred during fuzzing tests...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ath5k: The OOB issue in ath5keepromreadpcalinfo5111 has been fixed. The bug was discovered during fuzzing. The stack trace indicates that the issue lies in ath5keepromconvertpcalinfo5111. When no curve is selected in the loop, th...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: media: mceusb: Use the new usbcontrolmsg routines. Automatic kernel fuzzing led to a WARN message regarding an invalid pipe direction in the mceusb driver: ------------ Cut here ------------ usb 6-1: BOGUS control dir, pipe...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cdrom: The check for lastmediachange has been rearranged to avoid unintentional overflow. When running syzkaller with the newly reintroduced signed integer wrap sanitizer, we encounter this error: 366.015950 UBSAN:...

Astra Linux – Vulnerability in Firefox

Mozilla developers Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 99. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. Th...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: UDF: Detection of system inodes linked into the directory hierarchy When the UDF filesystem is corrupted, hidden system inodes may be linked into the directory hierarchy. This can lead to further serious corruption of the...

Astra Linux – Vulnerability in Thunderbird

Members of the Mozilla Fuzzing Team reported memory safety bugs in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. Thi...