jdam

jdam - 구조 인식 JSON 퍼징 jdam은 임의의 JSON 객체를 구조 인식 방식으로 퍼징하는 Radamsa에서 영감을 받은 도구로, 퍼징 결과가 항상 유효한 JSON임을 보장합니다. 많은 기존 퍼징 도구는 입력을 맹목적으로 변경하여 결과가 유효하지 않은 JSON이 되는 경우가 많습니다. 이는 퍼즈 테스트가 대상 애플리케이션의 JSON 파서만 실행하고, 요청이 유효하지 않기 때문에 퍼즈 테스트가 기본 애플리케이션 코드에 도달하지 못한다는 것을 의미합니다. Jdam은 이 문제를 해결하기 위한 시도입니다. jdam에는 퍼징된...

feroxfuzz

🚀 FeroxFuzz 🚀 構造認識型HTTPファジングライブラリ...

On the Effectiveness of Mutational Grammar Fuzzing

Posted by Ivan Fratric Mutational grammar fuzzing is a fuzzing technique in which the fuzzer uses a predefined grammar that describes the structure of the samples. When a sample gets mutated, the mutations happen in such a way that any resulting samples still adhere to the grammar rules, thus the...

BGPFuzz: Automated Configuration Fuzzing of the Border Gateway Protocol

Telecommunications networks rely on configurations to define routing behavior, especially in the Border Gateway Protocol BGP, where misconfigurations can lead to severe outages and security breaches, as demonstrated by the 2021 Facebook outage. Unlike existing approaches that rely on synthesis or...

MoPE: a Mixture of Password Experts for Improving Password Guessing

Textual passwords remain a predominant authentication mechanism in web security. To evaluate their strength, existing research has proposed several data-driven models across various scenarios. However, these models generally treat passwords uniformly, neglecting the structural differences among...

libspng/spng_read_fuzzer_structure_aware: Heap-use-after-free in read_chunks_before_idat

Project: https://gitlab.com/randy408/libspng.git https://github.com/randy408/libspng.git Detailed report: https://oss-fuzz.com/testcase?key=5759860653686784 Project: libspng Fuzzer: afllibspngspngreadfuzzerstructureaware Fuzz target binary: spngreadfuzzerstructureaware Job Type: aflasanlibspng...