googleprojectzero / DrSancov
DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables
☆207Updated 3 years ago
Alternatives and similar repositories for DrSancov:
Users that are interested in DrSancov are comparing it to the libraries listed below
- Fuzzing the Kernel Using Unicornafl and AFL++☆299Updated 2 years ago
- AFL++ as a library: gives you all the tools necessary to craft the best fuzzer for your targets with ease!☆112Updated 3 years ago
- A Linux Kernel Module that implements a fast snapshot mechanism for fuzzing.☆137Updated 3 years ago
- American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries☆187Updated 3 years ago
- AFL + DynamoRIO = fuzzing binaries with no source code on Linux☆248Updated 5 years ago
- ☆197Updated 2 years ago
- Improving AFL by using Intel PT to collect branch information☆292Updated 5 years ago
- HeapHopper is a bounded model checking framework for Heap-implementations☆215Updated 6 months ago
- ☆136Updated 3 years ago
- An awesome list for Effective and Powerful harnesses for fuzzing using libfuzzer - fuzzers by Google☆73Updated 4 years ago
- Source code of HAL-fuzz☆147Updated 4 years ago
- SALT - SLUB ALlocator Tracer for the Linux kernel☆150Updated 6 years ago
- An AFL implementation with UnTracer (our coverage-guided tracer)☆124Updated 2 years ago
- Coverage-guided binary fuzzing powered by Frida Stalker☆181Updated 3 years ago
- The new phuzzing framework!☆156Updated 10 months ago
- A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer☆343Updated 5 years ago
- ☆63Updated 6 years ago
- Use angr inside GDB. Create an angr state from the current debugger state.☆198Updated 4 years ago
- INACTIVE - http://mzl.la/ghe-archive - A Python3 bridge for implementing custom libFuzzer mutators☆74Updated 5 years ago
- ☆131Updated 5 years ago
- MrsPicky - An IDAPython decompiler script that helps auditing memcpy() and memmove() calls☆123Updated last year
- ☆247Updated 4 years ago
- Modular And Compositional analysis with KLEE Engine☆116Updated 5 years ago
- A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities☆334Updated 5 years ago
- An experimental high performance, fuzzing oriented Intel Processor Trace capture and analysis suite☆129Updated 3 years ago
- My fork of American Fuzzy Lop☆61Updated 6 years ago
- Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86) adapted to afl++☆44Updated 3 years ago
- TaintInduce is a project which aims to automate the creation of taint propagation rules for unknown instruction sets.☆58Updated 4 years ago
- Exploitation techniques to bypass Clang CFI when applied to Chromium☆113Updated 7 years ago
- Patches to afl to fix bugs or add enhancements☆80Updated 5 years ago