NEW BOT Телеграм, страница - 983212047

Fuzzing

531 subscribers

2 photos

1 file

105 links

Join our chat:
https://news.1rj.ru/str/offensive_binary

Download Telegram

About

Blog

Apps

Platform

531 subscribers

Razzer: Finding kernel race bugs through fuzzing https://github.com/compsec-snu/razzer #fuzzing

GitHub - compsec-snu/razzer: A Kernel fuzzer focusing on race bugs

A Kernel fuzzer focusing on race bugs. Contribute to compsec-snu/razzer development by creating an account on GitHub.

206 views11:16

Forwarded from Ghidra (SRE)

LaunchWinAFL Usage:

1) Install dynamorio and winafl
2) add https://gist.github.com/richinseattle/613105953003ec5e1f24ca17b2d8541f to ghidra noscripts, set some one-time config at top; install paths, etc
3) load target exe & coverage dlls into ghidra
4) go to target function in disasm
5) run noscript to start fuzzing!

LaunchWinAFL.java

GitHub Gist: instantly share code, notes, and snippets.

117 views11:17

Extracting a 19 Year Old Code Execution from WinRAR https://research.checkpoint.com/extracting-code-execution-from-winrar/ #expdev #afl #fuzzing

Check Point Research

Extracting a 19 Year Old Code Execution from WinRAR - Check Point Research

Research by: Nadav Grossman Introduction In this article, we tell the story of how we found a logical bug using the WinAFL fuzzer and exploited it in WinRAR to gain full control over a victim’s computer. The exploit works by just extracting an archive, and…

223 views11:20

This post will explain the process of finding and exploiting a previously unknown vulnerability in a real-world piece of software to achieve code execution. The vulnerability was initially found in 2016 and the vendor was contacted however no response was ever received. Now several years later (March 2019 at time of writing), the vulnerability still exists in the latest version.

https://medium.com/@DanielC7/introduction-to-file-format-fuzzing-exploitation-922143ab2ab3

Introduction to File Format Fuzzing & Exploitation

This post will explain the process of finding and exploiting a previously unknown vulnerability in a real-world piece of software to…

270 views11:20

Fuzzing Adobe Reader for exploitable vulns using AFL
https://kciredor.com/fuzzing-adobe-reader-for-exploitable-vulns-fun-not-profit.html #fuzzing

kciredor’s engineering and security blog

Fuzzing Adobe Reader for exploitable vulns (fun != profit)

Binaries vs websites It has been half a year since my last blog post covering an IDOR in a website API. About time to write about something new and hopefully interesting! Having switched my focus from websites to binaries a new world opened up to me.

287 views11:20

A great post on setting up fuzzing for a WebRTC server.

https://webrtchacks.com/fuzzing-janus/

How Janus Battled libFuzzer and Won (Alessandro Toppi) - webrtcHacks

In depth walkthrough of how to use libFuzzer and OSS-Fuzz for fuzz testing a RTCP parser using the WebRTC server, Janus as an example.

422 views11:20

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

https://github.com/secfigo/Awesome-Fuzzing

GitHub - secfigo/Awesome-Fuzzing: A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials…

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Develo...

450 viewsedited 11:20

Modular And Compositional analysis with KLEE Engine https://github.com/tum-i22/macke #klee #symbolic #fuzzing

GitHub - tum-i4/macke: Modular And Compositional analysis with KLEE Engine

Modular And Compositional analysis with KLEE Engine - tum-i4/macke

395 views11:20

fuzzilli - a JavaScript Engine Fuzzer https://github.com/googleprojectzero/fuzzilli #fuzzing

GitHub - googleprojectzero/fuzzilli: A JavaScript Engine Fuzzer

A JavaScript Engine Fuzzer. Contribute to googleprojectzero/fuzzilli development by creating an account on GitHub.

349 views11:20

Fuzzing pinned «A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis. https://github.com/secfigo/Awesome…»

11:21

Fuzzing the Kernel using AFL Unicorn https://github.com/fgsect/unicorefuzz

GitHub - fgsect/unicorefuzz: Fuzzing the Kernel Using Unicornafl and AFL++

Fuzzing the Kernel Using Unicornafl and AFL++. Contribute to fgsect/unicorefuzz development by creating an account on GitHub.

305 views08:51

A fuzzer framework built in Rust https://github.com/microsoft/lain

GitHub - microsoft/lain: A fuzzer framework built in Rust

A fuzzer framework built in Rust. Contribute to microsoft/lain development by creating an account on GitHub.

304 views10:32

Channel photo updated

09:44

uniFuzzer combines LibFuzzer with Unicorn to fuzz closed source binaries, including Arm & Mips code!

https://github.com/rk700/uniFuzzer

GitHub - PAGalaxyLab/uniFuzzer: A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer

A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer - GitHub - PAGalaxyLab/uniFuzzer: A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer

288 views15:28

DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables https://github.com/googleprojectzero/DrSancov

GitHub - googleprojectzero/DrSancov: DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables

DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables - googleprojectzero/DrSancov

283 views11:08

A set of helpers and examples to fuzz Win32 binaries with AFL++ QEMU

https://github.com/andreafioraldi/WineAFLplusplusDEMO #fuzzing

GitHub - AFLplusplus/Fuzz-With-Wine-Demo: A set of helpers and examples to fuzz Win32 binaries with AFL++ QEMU

A set of helpers and examples to fuzz Win32 binaries with AFL++ QEMU - AFLplusplus/Fuzz-With-Wine-Demo

305 views09:51

jqf - Coverage-guided semantic fuzzing for Java

https://github.com/rohanpadhye/jqf

GitHub - rohanpadhye/JQF: JQF + Zest: Coverage-guided semantic fuzzing for Java.

JQF + Zest: Coverage-guided semantic fuzzing for Java. - rohanpadhye/JQF

314 viewsedited 10:05

Frida-based general purpose fuzzer

https://github.com/demantz/frizzer

GitHub - demantz/frizzer: Frida-based general purpose fuzzer

Frida-based general purpose fuzzer. Contribute to demantz/frizzer development by creating an account on GitHub.

306 views13:06

https://research.checkpoint.com/the-road-to-qualcomm-trustzone-apps-fuzzing/

Check Point Research

The Road to Qualcomm TrustZone Apps Fuzzing - Check Point Research

Research By: Slava Makkaveev Trusted Execution Environment TrustZone is a security extension integrated by ARM into the Corex-A processor. This extension creates an isolated virtual secure world which can be used by the main operating system running on the…

299 views06:23

AFL in-memory fuzzing with Frida JS - absolutely useless

https://github.com/andreafioraldi/frida-js-afl-instr

GitHub - andreafioraldi/frida-js-afl-instr: An example on how to do performant in-memory fuzzing with AFL++ and Frida

An example on how to do performant in-memory fuzzing with AFL++ and Frida - andreafioraldi/frida-js-afl-instr

328 views10:02

fzero_fuzzer

A fast Rust-based safe and thead-friendly grammar-based fuzz generator

https://github.com/gamozolabs/fzero_fuzzer

GitHub - gamozolabs/fzero_fuzzer: A fast Rust-based safe and thead-friendly grammar-based fuzz generator

A fast Rust-based safe and thead-friendly grammar-based fuzz generator - gamozolabs/fzero_fuzzer

350 views08:54