drAFL

drAFL 原始的AFL支持使用QEMU模式进行黑盒覆盖引导的模糊测试。我强烈建议先尝试它，如果不起作用，你可以尝试这个工具。此外，你可能还想尝试Manul，它支持在Windows和Linux上进行黑盒二进制文件模糊测试。 使用方法 你需要指定DRRUNPATH指向drrun启动器，以及LIBCOVPATH指向libbinafl.so覆盖库。你还需要关闭AFL的fork服务器（AFLNOFORKSRV=1），可能还需要AFLSKIPBINCHECK=1。详情请参阅下方构建部分的第5步。...

peafl64

Descripción general peafl64 es una herramienta de instrumentación estática para PE x64 en Windows. La instrumentación estática consiste en editar archivos ejecutables y añadir código en ubicaciones específicas de los mismos. La instrumentación añade código al inicio de cada bloque básico del...

Hidden for 19 years WinRAR code execution vulnerability-vulnerability warning-the black bar safety net

The researchers found WinRAR logic vulnerabilities that can full access to the victims computer control. The exploit only requires from the compressed file to extract it can work, more than 5 million users affected. More importantly, the vulnerability has been there 19 years, forcing WinRAR...

Fuzzing Windows Binaries: WinAFL

AFL is a popular fuzzing tool for coverage-guided fuzzing. The tool combines fast target execution with clever heuristics to find new execution paths in the target binary. It has been successfully used to find a large number of vulnerabilities in real products. For more info about the original...