Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
FuzzDB was developed to enhance the chances of identifying security vulnerabilities in applications through dynamic testing methods. As the first and most extensive open repository of fault injection patterns, along with predictable resource locations and regex for server response matching, it serves as an invaluable resource. This comprehensive database includes detailed lists of attack payload primitives aimed at fault injection testing. The patterns are organized by type of attack and, where applicable, by the platform, and they are known to lead to vulnerabilities such as OS command injection, directory listings, directory traversals, source code exposure, file upload bypass, authentication bypass, cross-site scripting (XSS), HTTP header CRLF injections, SQL injection, NoSQL injection, and several others. For instance, FuzzDB identifies 56 patterns that might be interpreted as a null byte, in addition to offering lists of frequently used methods and name-value pairs that can activate debugging modes. Furthermore, the resource continuously evolves as it incorporates new findings and community contributions to stay relevant against emerging threats.
Description
AFL-Unicorn provides the capability to fuzz any binary that can be emulated using the Unicorn Engine, allowing you to target specific code segments for testing. If you can emulate the desired code with the Unicorn Engine, you can effectively use AFL-Unicorn for fuzzing purposes. The Unicorn Mode incorporates block-edge instrumentation similar to what AFL's QEMU mode employs, enabling AFL to gather block coverage information from the emulated code snippets to drive its input generation process. The key to this functionality lies in the careful setup of a Unicorn-based test harness, which is responsible for loading the target code, initializing the state, and incorporating data mutated by AFL from its disk storage. After establishing these parameters, the test harness emulates the binary code of the target, and upon encountering a crash or error, triggers a signal to indicate the issue. While this framework has primarily been tested on Ubuntu 16.04 LTS, it is designed to be compatible with any operating system that can run both AFL and Unicorn without issues. With this setup, developers can enhance their fuzzing efforts and improve their binary analysis workflows significantly.
API Access
Has API
API Access
Has API
Integrations
BlackArch Linux
NoSQL
OWASP ZAP
Pricing Details
Free
Free Trial
Free Version
Pricing Details
Free
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
FuzzDB
Website
github.com/fuzzdb-project/fuzzdb
Vendor Details
Company Name
Battelle
Website
github.com/Battelle/afl-unicorn