uniFuzzer

uniFuzzer uniFuzzer is a fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer. Currently it supports fuzzing 32-bits LSB ELF files on ARM/MIPS, which are usually seen in IoT devices. 中文介绍 Features very little hack and easy to build can target any specified function or code snipp...

autoharness

AutoHarness Creado por Akshat Parikh ¿Qué es esta herramienta? AutoHarness es una herramienta que genera automáticamente harnesses de fuzzing para ti. Esta idea surge de un problema concurrente en el fuzzing de bases de código hoy en día: las bases de código grandes tienen miles de funciones y...

fuzzuf

fuzzuf fuzzuf fuzz ing u nification f ramework es un marco de trabajo framework de fuzzing con su propio DSL para describir un bucle de fuzzing mediante la construcción de bloques de construcción de primitivas de fuzzing. Para instrucciones de compilación y un tutorial, siga building.md y...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

unicorn

Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...

ruzzy

Ruzzy A coverage-guided fuzzer for pure Ruby code and Ruby C extensions. Ruzzy is heavily inspired by Google's Atheris, a Python fuzzer. Ruzzy uses libFuzzer or LibAFL for its coverage instrumentation and fuzzing engine. Ruzzy also supports AddressSanitizer and UndefinedBehaviorSanitizer when...

oss-fuzz

OSS-Fuzz: Fuzzing Continuo para Software de Código Abierto Fuzz testing es una técnica bien conocida para descubrir errores de programación en el software. Muchos de estos errores detectables, como buffer overflow, pueden tener graves implicaciones de seguridad. Google ha encontrado miles de...

cargo-fuzz

cargo fuzz 一个用于通过libFuzzer 进行模糊测试的 cargo 子命令！易于使用！ 安装 root@kitploit: $ cargo install cargo-fuzz 注意：libFuzzer 需要 LLVM sanitizer（消毒器）支持，因此仅适用于 x86-64 和 Aarch64 架构，并且仅适用于类 Unix 操作系统（不适用于 Windows）。此外，由于使用了一些不稳定的命令行标志，它还需要 nightly 版本编译器。你还需要一个支持 C++11 的 C++ 编译器。 用法 cargo fuzz init 为你的 crate 初始化一个 carg...

CVE-2023-4863-

CVE-2023-4863 Desencadenando la famosa vuln 0day de libweb con libfuzzer...

centipede

Centipede - 一个分布式模糊测试引擎。正在开发中。 为什么选择 Centipede 为什么不呢？我们目前正尝试对某些非常大且非常慢的目标进行模糊测试，而 libFuzzer、AFL 之类的工具不一定能很好地扩展。关于我们的一个动机示例，请参阅 SiliFuzz。在开发 Centipede 的过程中，我们计划试验一些现有模糊测试引擎未曾尝试的大规模差分模糊测试新方法。 值得注意的特性： 开箱即用地支持基于 libFuzzer 的模糊测试目标。要使用你最喜欢的 LLVMFuzzerTestOneInput，你只需使用 Centipede 的编译器和链接器选项来构建目标。 正在开发中...

fuzzing

Fuzzing Forum This project aims at hosting tutorials, examples, discussions, research proposals, and other resources related to fuzzing. External contributions are welcome, please see CONTRIBUTING file for more info. Documentation Why fuzz? Introduction to fuzzing What makes a good fuzz target Ho...

Pishi

Pishi Pishi is a static binary rewriting tool designed to instrument basic blocks in XNU kernel and in arbitrary macOS kernel extensions kexts. for XNU kernel, Pishi allows you to instrument at a function, file, or folder level. For example, you can instrument everything in the /bsd/net/ director...

bunch-of-fuzzers-developed-using-libfuzzer-and-asan

bunch-of-fuzzers-developed-using-libfuzzer-and-asan...

llvm:llvm-special-case-list-fuzzer: Crash in p_ere

Detailed Report: https://oss-fuzz.com/testcase?key=6388532688781312 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b6587ce1ff0 Crash State: pere pere pere Sanitizer: addre...

fuzzing

libfuzzer-workshop Materials of "Modern fuzzing of C/C++ Projects" workshop. The first version of the workshop had been presented at ZeroNights'16 security conference. Disclaimer This workshop was originally developed in 2016. As of today 2021 and beyond, the practical side of the workshop might ...

apache-commons-bcel:BcelFuzzer: Security exception in org.apache.bcel.classfile.Attribute.readAttribute

Detailed Report: https://oss-fuzz.com/testcase?key=4855215269216256 Project: apache-commons-bcel Fuzzing Engine: libFuzzer Fuzz Target: BcelFuzzer Job Type: libfuzzerasanapache-commons-bcel Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.100/.101 for Windows, Mac and 129.0.6668.100 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.70/.71 for Windows, Mac and 129.0.6668.70 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

Stable Channel update for Desktop

The Stable channel has been updated to 128.0.6613.119/.120 for Windows, Mac and 128.0.6613.119 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 128.0.6613.120 for Windows and Mac...

Stable Channel Update for Desktop

The Stable channel has been updated to 126.0.6478.114/115 for Windows, Mac and 126.0.6478.114 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...