{"repo":"0vercl0k/wtf","free":true,"listed":false,"github":"https://github.com/0vercl0k/wtf","clone":"git clone https://github.com/0vercl0k/wtf.git","description":"wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).","language":"C++","stars":1790,"topics":["fuzzer","snapshot-fuzzer","kvm-api","code-coverage","winhv","bochscpu","bochs","security","fuzzing","testing"],"license":"MIT","category":"security-tools","readme_excerpt":"what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!). Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows or Linux ( experimental , see linux mode). Execution of the target can be done inside an emulator with bochscpu (slowest, most precise), inside a Windows VM with the Windows Hypervisor Platform APIs or inside a Linux VM with the KVM APIs (fastest). It uncovered memory corruption vulnerabilities in a wide range of softwares: IDA Pro, a popular AAA game, the Windows kernel, the Microsoft RDP client, NVIDIA GPU Display driver, etc. Compiled binaries are available from either the CI artifacts or from the Releases section for both Windows & Linux. If you would like to read more about its history or how to use it on a real target, I recommend to take a look at those posts to get started 🔥 - Building a new snapshot fuzzer & fuzzing IDA - Fuzzing Modern UDP Game Protocols With Snapshot-based Fuzzers by Markus Gaasedelen - Fuzzing RDPEGFX with \"what the fuzz\" by Colas Le Guernic, Jérémy Rubert, and Anonymous - A Journey to Network Protocol Fuzzing – Dissecting Microsoft IMAP Client Protocol by Wayne Chin Yick Low - The Snapshot Fuzzing section of Trail Of Bits' Testing Handbook","default_branch":null,"files":null,"tree":[],"storefront":"/r/0vercl0k","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/0vercl0k/wtf/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}