Google Project Zero

winafl

A fork of AFL for fuzzing Windows binaries

sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

fuzzilli

A JavaScript Engine Fuzzer

domato

DOM fuzzer

TinyInst

A lightweight dynamic instrumentation library

Jackalope

Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android

halfempty

A fast, parallel test case minimization tool.

symboliclink-testing-tools

0days-in-the-wild

Repository for information about 0-days exploited in-the-wild.

p0tools

Project Zero Docs and Tools

ktrw

An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.

functionsimsearch

Some C++ example code to demonstrate how to perform code similarity searches using SimHashing.

BrokenType

TrueType and OpenType font fuzzing toolset

iOS-messaging-tools

SockFuzzer

SkCodecFuzzer

Fuzzing harness for testing proprietary image codecs supported by Skia on Android

bochspwn

A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities

bochspwn-reloaded

A Bochs-based instrumentation performing kernel memory taint tracking to detect disclosure of uninitialized memory to ring 3

Street-Party

Street Party is a suite of tools that allows the RTP streams of video conferencing implementations to be viewed and modified.

DrSancov

DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables

CompareCoverage

Clang instrumentation module for tracing variable and buffer comparisons in C/C++ and saving the coverage data to .sancov files

Hyntrospect

reil

.allstar

.github