Regshot
syzkaller
Regshot | syzkaller | |
---|---|---|
8 | 7 | |
252 | 5,186 | |
13.5% | 1.0% | |
0.0 | 9.8 | |
almost 5 years ago | about 14 hours ago | |
Go | ||
MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Regshot
- Differ: Tool for testing and validating transformed programs
-
Question about packaging software
Think I found it: https://github.com/Seabreg/Regshot
-
Is there a way to track which registry keys use a specific software?
You could also use Regshot. It makes 1 'snapshot' of the registry, allows you to make a second one (after said software made changes) and compare the two snapshots. Then it gives you a complete list of all added, removed and changes keys.
-
Is there a way to check the creation date for a particular registry?
RegShot makes it easy.
- What is the easiest to see what registry values are changed during an install?
-
Disabling Broswer Password Management
If you can deploy using Group Policy, you can use RegShot: https://github.com/Seabreg/Regshot to figure out what registry changes are made so you can replicate that.
-
Capturing all steps of an application installation - recommended apps
Never tried it myself, but Regshot should at least cover you regarding the registry.
-
IT Pro Tuesday #165 - Registry Comparison, PowerShell Web Tools, Tech Blog & More
Regshot is an open-source registry-comparison utility that can be helpful after making system changes or installing a new software product. It allows you to quickly take a snapshot of the registry pre- and post-change, and then produces a changes report (in either text or HTML) that lists all modifications between the two snapshots. You can also specify folders (with subfolders) to scan for changes as well. A shout out to daonlyfreez for directing us to this one.
syzkaller
-
Automated Unit Test Improvement Using Large Language Models at Meta
https://arxiv.org/abs/2402.09171 :
> This paper describes Meta's TestGen-LLM tool, which uses LLMs to automatically improve existing human-written tests. TestGen-LLM verifies that its generated test classes successfully clear a set of filters that assure measurable improvement over the original test suite, thereby eliminating problems due to LLM hallucination. [...] We believe this is the first report on industrial scale deployment of LLM-generated code backed by such assurances of code improvement.
Coverage-guided unit test improvement might [with LLMs] be efficient too.
https://github.com/topics/coverage-guided-fuzzing :
- e.g. Google/syzkaller is a coverage-guided syscall fuzzer: https://github.com/google/syzkaller
- Gitlab CI supports coverage-guided fuzzing: https://docs.gitlab.com/ee/user/application_security/coverag...
- oss-fuzz, osv
Additional ways to improve tests:
Hypothesis and pynguin generate tests from type annotations.
There are various tools to generate type annotations for Python code;
> pytype (Google) [1], PyAnnotate (Dropbox) [2], and MonkeyType (Instagram) [3] all do dynamic / runtime PEP-484 type annotation type inference [4] to generate type annotations. https://news.ycombinator.com/item?id=39139198
icontract-hypothesis generates tests from icontract DbC Design by Contract type, value, and invariance constraints specified as precondition and postcondition @decorators:
-
Differ: Tool for testing and validating transformed programs
https://google.github.io/clusterfuzz/setting-up-fuzzing/libf...
> OSS-Fuzz runs CloudFuzz[Lite?] for many open source repos and feeds OSV OpenSSF Vulnerability Format: https://github.com/google/osv#current-data-sources
.
Google/syzkaller https://github.com/google/syzkaller :
>> syzkaller is an unsupervised coverage-guided kernel fuzzer. Supported OSes: Akaros, FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, Windows
.
ghidra-patchdiff-correlator:
-
Fuzz Testing Is the Best Thing to Happen to Our Application Tests
The key to modern fuzzing is feedback, usually some kind of coverage testing of the program under test. This allows the fuzzer to be much smarter about how it finds new code paths, and makes fuzzing find bugs a lot quicker.
Google have a project to do fuzzing on Linux system calls using coverage feedback: https://github.com/google/syzkaller
-
Is there a Linux user-space program that causes execution through every kernel function path and context?
Utilities that try to exercise ("fuzz") an interface with the intent of discovering bugs are called "fuzzers". The tool that comes to mind is syzkaller.
-
Those scary warnings of juice jacking in airports and hotels? They’re nonsense
It's true that USB is probably a less desirable attack surface than modems, because it actually requires the user to physically connect their device to a malicious device, but I wouldn't discount it as impractical and unlikely to happen in the wild. There's a reason some of the more famous malware and spyware used to spread/attack over USB. Google actually does USB driver fuzzing and the amount of potentially devastating vulnerabilities is staggering.
- Linux System Call Table – Chromiumos
- Audit of Linux kernel code
What are some alternatives?
CompCert - The CompCert formally-verified C compiler
AFLplusplus - The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
osv - Open source vulnerability DB and triage service. [Moved to: https://github.com/google/osv.dev]
vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
ipa-medit - Memory modification tool for re-signed ipa supports iOS apps running on iPhone and Apple Silicon Mac without jailbreaking.
wtf - wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).
gvisor - Application Kernel for Containers
xpid - Linux Process Discovery. C Library, Go bindings, Runtime.
cfuzzer - url-fuzzer
clusterfuzzlite - ClusterFuzzLite - Simple continuous fuzzing that runs in CI.
Fuzzing101 - An step by step fuzzing tutorial. A GitHub Security Lab initiative