一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
☆1,075Aug 24, 2021Updated 4 years ago
Alternatives and similar repositories for Source-and-Fuzzing
Users that are interested in Source-and-Fuzzing are comparing it to the libraries listed below
Sorting:
- Recent Fuzzing Paper☆2,737Nov 4, 2025Updated 3 months ago
- A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers and AFL-fuzzing tutorials☆560Dec 11, 2023Updated 2 years ago
- IoT固件漏洞复现环境☆1,261Jul 30, 2023Updated 2 years ago
- Getting started with static program analysis. 静态程序分析入门教程。☆1,766Mar 20, 2024Updated last year
- 《深入理解CodeQL》Finding vulnerabilities with CodeQL.☆1,757Nov 21, 2023Updated 2 years ago
- There are some papers about fuzzing. I record them by Xmind. Welcome to contact to me.☆276Oct 28, 2019Updated 6 years ago
- Browser Fuzz Summarize / 浏览器模糊测试综述☆142Oct 4, 2020Updated 5 years ago
- 模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode …☆188Jun 25, 2016Updated 9 years ago
- Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.☆1,299Jun 29, 2023Updated 2 years ago
- BinAbsInspector: Vulnerability Scanner for Binaries☆1,670Jun 17, 2024Updated last year
- A collection of links related to VMware escape exploits☆1,494Sep 4, 2024Updated last year
- OpenSource My ImageMagick Fuzzer ..☆298Jul 26, 2017Updated 8 years ago
- CTF竞赛权威指南☆4,445Jul 27, 2024Updated last year
- share some useful archives about vm and qemu escape exploit.☆583Apr 12, 2024Updated last year
- 静态分析及代码审计自动化相关资料收集☆298Jul 29, 2022Updated 3 years ago
- KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。☆2,379Jan 16, 2026Updated last month
- Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…☆2,689Mar 14, 2024Updated last year
- A CAT called tabby ( Code Analysis Tool )☆1,637Jan 17, 2026Updated last month
- Learn how to combine libprotobuf-mutator with libfuzzer & AFL++☆258Sep 24, 2024Updated last year
- Software-Security-Learning☆1,278Aug 31, 2022Updated 3 years ago
- Something about AEG☆272May 29, 2019Updated 6 years ago
- 总结了20+.Net反序列化文章，持续更新☆748Apr 3, 2024Updated last year
- 安卓内核提权漏洞分析☆493Apr 27, 2019Updated 6 years ago
- Exercises to learn how to fuzz with American Fuzzy Lop☆1,275Oct 12, 2022Updated 3 years ago
- Resources related to GitHub Security Lab☆1,587Dec 2, 2025Updated 3 months ago
- A JavaScript Engine Fuzzer☆2,152Updated this week
- Framework for Automating Fuzzable Target Discovery with Static Analysis.☆548Feb 1, 2024Updated 2 years ago
- UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities☆350Sep 25, 2023Updated 2 years ago
- Codeql学习笔记☆900Apr 25, 2022Updated 3 years ago
- awesome list of browser exploitation tutorials☆2,267Sep 18, 2023Updated 2 years ago
- Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）☆3,588Sep 26, 2022Updated 3 years ago
- 虚拟化保护（VMP壳）分析相关资料☆1,080Aug 2, 2018Updated 7 years ago
- Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android☆1,293Jan 13, 2026Updated last month
- Security Conference Archive☆433Sep 5, 2020Updated 5 years ago
- 静态分析笔记 Static-Analysis-Notes 程序分析笔记 资源分享☆187Jan 11, 2023Updated 3 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆458Mar 24, 2022Updated 3 years ago
- ☆835Jun 7, 2022Updated 3 years ago
- ☆342Jan 23, 2022Updated 4 years ago
- Recent Fuzzing Paper☆356Sep 15, 2020Updated 5 years ago