1 repositorio
Techniques for identifying memory safety issues and undefined behavior using automated input generation.
Distinct from Vulnerability Discovery Pipelines: Shortlist candidates are either too narrow (kernel-only) or refer to exploit lists rather than discovery methodology.
Explore 1 awesome GitHub repository matching security & cryptography · Vulnerability Discovery Methods. Refine with filters or upvote what's useful.
This project is a comprehensive software fuzzing knowledge base and technical guide designed for discovering software bugs and vulnerabilities. It serves as a resource for implementing coverage-guided, structure-aware, and hybrid fuzzing across various targets, including compiled binaries and hardware kernels. The resource provides specialized guidance on using grammars and defined data formats to generate syntactically valid inputs for complex APIs. It also details methods for combining grey-box fuzzing with symbolic execution to reach deep execution paths and utilizes binary instrumentation
Provides a comprehensive guide for discovering memory safety bugs and undefined behavior in software.