Fuzzing – Telegram

Fuzzing

533 subscribers

2 photos

1 file

105 links

Join our chat:
https://t.iss.one/offensive_binary

Download Telegram

About

Blog

Apps

Platform

533 subscribers

This post will explain the process of finding and exploiting a previously unknown vulnerability in a real-world piece of software to achieve code execution. The vulnerability was initially found in 2016 and the vendor was contacted however no response was ever received. Now several years later (March 2019 at time of writing), the vulnerability still exists in the latest version.

https://medium.com/@DanielC7/introduction-to-file-format-fuzzing-exploitation-922143ab2ab3

Introduction to File Format Fuzzing & Exploitation

This post will explain the process of finding and exploiting a previously unknown vulnerability in a real-world piece of software to…

272 views11:20

Fuzzing Adobe Reader for exploitable vulns using AFL
https://kciredor.com/fuzzing-adobe-reader-for-exploitable-vulns-fun-not-profit.html #fuzzing

kciredor’s engineering and security blog

Fuzzing Adobe Reader for exploitable vulns (fun != profit)

Binaries vs websites It has been half a year since my last blog post covering an IDOR in a website API. About time to write about something new and hopefully interesting! Having switched my focus from websites to binaries a new world opened up to me.

289 views11:20

A great post on setting up fuzzing for a WebRTC server.

https://webrtchacks.com/fuzzing-janus/

How Janus Battled libFuzzer and Won (Alessandro Toppi) - webrtcHacks

In depth walkthrough of how to use libFuzzer and OSS-Fuzz for fuzz testing a RTCP parser using the WebRTC server, Janus as an example.

425 views11:20

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

https://github.com/secfigo/Awesome-Fuzzing

GitHub - secfigo/Awesome-Fuzzing: A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials…

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Develo...

453 viewsedited 11:20

Modular And Compositional analysis with KLEE Engine https://github.com/tum-i22/macke #klee #symbolic #fuzzing

GitHub - tum-i4/macke: Modular And Compositional analysis with KLEE Engine

Modular And Compositional analysis with KLEE Engine - tum-i4/macke

398 views11:20

fuzzilli - a JavaScript Engine Fuzzer https://github.com/googleprojectzero/fuzzilli #fuzzing

GitHub - googleprojectzero/fuzzilli: A JavaScript Engine Fuzzer

A JavaScript Engine Fuzzer. Contribute to googleprojectzero/fuzzilli development by creating an account on GitHub.

351 views11:20

Fuzzing pinned «A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis. https://github.com/secfigo/Awesome…»

11:21

Fuzzing the Kernel using AFL Unicorn https://github.com/fgsect/unicorefuzz

GitHub - fgsect/unicorefuzz: Fuzzing the Kernel Using Unicornafl and AFL++

Fuzzing the Kernel Using Unicornafl and AFL++. Contribute to fgsect/unicorefuzz development by creating an account on GitHub.

306 views08:51

A fuzzer framework built in Rust https://github.com/microsoft/lain

GitHub - microsoft/lain: A fuzzer framework built in Rust

A fuzzer framework built in Rust. Contribute to microsoft/lain development by creating an account on GitHub.

305 views10:32

Channel photo updated

09:44

uniFuzzer combines LibFuzzer with Unicorn to fuzz closed source binaries, including Arm & Mips code!

https://github.com/rk700/uniFuzzer

GitHub - PAGalaxyLab/uniFuzzer: A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer

A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer - GitHub - PAGalaxyLab/uniFuzzer: A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer

289 views15:28

DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables https://github.com/googleprojectzero/DrSancov

GitHub - googleprojectzero/DrSancov: DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables

DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables - googleprojectzero/DrSancov

284 views11:08

A set of helpers and examples to fuzz Win32 binaries with AFL++ QEMU

https://github.com/andreafioraldi/WineAFLplusplusDEMO #fuzzing

GitHub - AFLplusplus/Fuzz-With-Wine-Demo: A set of helpers and examples to fuzz Win32 binaries with AFL++ QEMU

A set of helpers and examples to fuzz Win32 binaries with AFL++ QEMU - AFLplusplus/Fuzz-With-Wine-Demo

307 views09:51

jqf - Coverage-guided semantic fuzzing for Java

https://github.com/rohanpadhye/jqf

GitHub - rohanpadhye/JQF: JQF + Zest: Coverage-guided semantic fuzzing for Java.

JQF + Zest: Coverage-guided semantic fuzzing for Java. - rohanpadhye/JQF

316 viewsedited 10:05

Frida-based general purpose fuzzer

https://github.com/demantz/frizzer

GitHub - demantz/frizzer: Frida-based general purpose fuzzer

Frida-based general purpose fuzzer. Contribute to demantz/frizzer development by creating an account on GitHub.

308 views13:06

https://research.checkpoint.com/the-road-to-qualcomm-trustzone-apps-fuzzing/

Check Point Research

The Road to Qualcomm TrustZone Apps Fuzzing - Check Point Research

Research By: Slava Makkaveev Trusted Execution Environment TrustZone is a security extension integrated by ARM into the Corex-A processor. This extension creates an isolated virtual secure world which can be used by the main operating system running on the…

300 views06:23

AFL in-memory fuzzing with Frida JS - absolutely useless

https://github.com/andreafioraldi/frida-js-afl-instr

GitHub - andreafioraldi/frida-js-afl-instr: An example on how to do performant in-memory fuzzing with AFL++ and Frida

An example on how to do performant in-memory fuzzing with AFL++ and Frida - andreafioraldi/frida-js-afl-instr

330 views10:02

fzero_fuzzer

A fast Rust-based safe and thead-friendly grammar-based fuzz generator

https://github.com/gamozolabs/fzero_fuzzer

GitHub - gamozolabs/fzero_fuzzer: A fast Rust-based safe and thead-friendly grammar-based fuzz generator

A fast Rust-based safe and thead-friendly grammar-based fuzz generator - gamozolabs/fzero_fuzzer

351 views08:54

https://code610.blogspot.com/2019/11/from-0-to-0day-quick-fuzzing-lesson.html

From 0 to 0day - quick fuzzing lesson

pentest research exploits security writeup - you name IT.

331 views07:45

Frida API Fuzzer

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

https://github.com/andreafioraldi/frida-fuzzer

GitHub - andreafioraldi/frida-fuzzer: This experimetal fuzzer is meant to be used for API in-memory fuzzing.

This experimetal fuzzer is meant to be used for API in-memory fuzzing. - andreafioraldi/frida-fuzzer

336 views12:15

Fuzzowski

The aim of this tool is to assist during the whole process of fuzzing a network protocol, allowing to define the communications, helping to identify the "suspects" of crashing a service, and much more
https://github.com/nccgroup/fuzzowski

GitHub - nccgroup/fuzzowski: the Network Protocol Fuzzer that we will want to use.

the Network Protocol Fuzzer that we will want to use. - nccgroup/fuzzowski

358 views12:15