OFFAT

OWASP OFFAT OWASP OFFAT（OFFensive Api Tester）旨在根据 OpenAPI 规范文件生成测试后，自动检测 API 的常见漏洞。它提供自动模糊测试输入的功能，并支持在测试中使用用户通过 YAML 配置文件提供的输入。 演示 注意：表中 'dataleak' 和 'result' 列代表独立的方面。端点可能存在数据泄露，但该端点的结果仍可能标记为 '成功'。这是因为 'result' 列不一定反映整体测试结果；即使存在数据泄露，它也可能显示为成功。 安全检测 受限 HTTP 方法 SQLi BOLA 数据暴露 BOPLA / 批量赋值 失效的访问控制...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

xss-vulnerability-scanner

Application Security: Automated Reflected XSS Web Fuzzer 📝...

ruby-web-vulnerability-tester

ruby-web-vulnerability-tester 🔎 Ruby Web Application Vulnera...

fluent-bit:flb-it-fuzz-input_fuzzer_OSSFUZZ: Heap-use-after-free in cio_error_reset

Detailed Report: https://oss-fuzz.com/testcase?key=5326228809121792 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-inputfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x512000092fb8 Crash State:...

libetpan -- null dereference vulnerability in MIME parsing component

rwhitworth reports: I was using American Fuzzy Lop afl-fuzz to fuzz input to the mime-parse test program. Is fixing these crashes something you're interested in? The input files can be found here: https://github.com/rwhitworth/libetpan-fuzz/. The files can be executed as ./mime-parse idfilename t...