├── .envrc ├── .github └── workflows │ ├── hugo.yml │ ├── markdown.yml │ └── preview.yml ├── .gitignore ├── .gitmodules ├── .lycheeignore ├── .markdownlint-cli2.jsonc ├── .markdownlint.jsonc ├── CODEOWNERS ├── LICENSE ├── README.md ├── archetypes └── default.md ├── assets ├── _custom.scss └── _variables.scss ├── config.toml ├── content ├── _index.md └── docs │ ├── crypto │ ├── _index.md │ ├── constant_time_tool │ │ ├── Dudect.md │ │ ├── _index.md │ │ └── timecop.md │ ├── wycheproof │ │ ├── _index.md │ │ └── wycheproo_example.md │ └── zkdocs │ │ └── _index.md │ ├── dynamic-analysis │ └── _index.md │ ├── fuzzing │ ├── 10-ossfuzz.md │ ├── 3-python.md │ ├── 4-ruby.md │ ├── 5-snapshot.md │ ├── 5-snapshot │ │ ├── figure1.png │ │ ├── figure2.png │ │ ├── figure3.png │ │ ├── figure4.png │ │ ├── figure5.png │ │ ├── figure6.png │ │ └── figure7.png │ ├── 91-resources.md │ ├── _index.md │ ├── c-cpp │ │ ├── 10-libfuzzer │ │ │ └── index.md │ │ ├── 11-aflpp │ │ │ ├── aflpp-decision.drawio.svg │ │ │ ├── aflpp.png │ │ │ └── index.md │ │ ├── 12-libafl │ │ │ ├── index.md │ │ │ └── libafl.png │ │ ├── _index.md │ │ └── techniques │ │ │ ├── 01-coverage │ │ │ ├── cov1.png │ │ │ ├── cov2.png │ │ │ ├── cov3.png │ │ │ ├── coverage-flow.svg │ │ │ └── index.md │ │ │ ├── 02-obstacles │ │ │ └── index.md │ │ │ └── _index.md │ ├── intro.svg │ ├── rust │ │ ├── 10-cargo-fuzz │ │ │ └── index.md │ │ ├── _index.md │ │ └── techniques │ │ │ ├── 01-coverage │ │ │ ├── coverage-flow.svg │ │ │ └── index.md │ │ │ ├── 02-obstacles │ │ │ └── index.md │ │ │ ├── 03-writing-harnesses │ │ │ └── index.md │ │ │ └── _index.md │ └── techniques │ │ ├── 01-writing-harnesses.md │ │ ├── 02-dictionary.md │ │ ├── 03-asan.md │ │ ├── 04-env.md │ │ ├── 05-faq.md │ │ └── _index.md │ ├── static-analysis │ ├── _index.md │ ├── codeql │ │ ├── 00-installation.md │ │ ├── 10-advanced.md │ │ ├── 20-ci.md │ │ ├── 99-resources.md │ │ └── _index.md │ └── semgrep │ │ ├── 00-installation.md │ │ ├── 10-advanced.md │ │ ├── 20-ci.md │ │ ├── 30-org.md │ │ ├── 99-resources.md │ │ └── _index.md │ ├── template.md │ └── web │ ├── _index.md │ └── burp │ ├── _index.md │ ├── bugs-vs-features │ └── _index.md │ ├── burp-resources │ └── _index.md │ ├── stepbystep │ ├── 01-livetask │ │ └── _index.md │ ├── 02-workingmanually │ │ ├── 01-repeater │ │ │ ├── _index.md │ │ │ ├── content-type-converter.png │ │ │ ├── csrfoptions.png │ │ │ ├── generatecsrfpoc.png │ │ │ ├── minimizer-after.png │ │ │ ├── minimizer_before.png │ │ │ ├── repeater_options.png │ │ │ ├── repeater_request_minimizer.png │ │ │ ├── repeater_showchars.png │ │ │ ├── repeater_tab_options.png │ │ │ ├── test1337placeholder1.png │ │ │ └── test1337placeholder2.png │ │ ├── 02-intruder │ │ │ ├── _index.md │ │ │ ├── collabo-event-log.png │ │ │ ├── collabo-interaction-column.png │ │ │ ├── custom-wordlists.png │ │ │ ├── extension-generated.png │ │ │ ├── intruder-attack-type.png │ │ │ └── target-payload-markers.png │ │ ├── 03-collaborator │ │ │ ├── _index.md │ │ │ ├── burp-collaborator-ua.png │ │ │ ├── collaborator-settings.png │ │ │ └── collaborator-tab.png │ │ └── _index.md │ ├── 03-ensure-working-correctly │ │ └── _index.md │ └── _index.md │ └── tips │ ├── _index.md │ ├── allow-tags-in-proxy.png │ ├── auto-modified.png │ ├── autorize.png │ ├── bambda.png │ ├── browser-with-hud.png │ ├── burp-search.png │ ├── collaborator-everywhere.png │ ├── create-new-tab-group.png │ ├── distributed-damage.png │ ├── easy-auto-refresh.png │ ├── global-search.png │ ├── hackvertor-store.png │ ├── hackvertor-turbo-intruder.png │ ├── injection-pt-turbo-intruder.png │ ├── match-and-replace-rules.png │ ├── pause-tasks.png │ ├── remove-csp.png │ ├── repeater-add-tab.png │ ├── request-interference.png │ ├── send-in-parallel.png │ ├── session-handling-rule-scope.png │ ├── session-handling-rule.png │ ├── turbo-intruder.png │ └── upstream-proxy-rule.png ├── layouts ├── _default │ └── _markup │ │ └── render-link.html ├── partials │ └── docs │ │ ├── brand.html │ │ └── inject │ │ └── footer.html └── shortcodes │ ├── customFigure.html │ ├── fuzzing │ ├── intro-os.html │ └── oss-fuzz-faq.html │ ├── math.html │ ├── rawHtml.html │ ├── resourceFigure.html │ ├── resourceHref.html │ └── tooltipHighlight.html ├── materials └── fuzzing │ ├── .gitignore │ ├── aflpp │ ├── CMakeLists.txt │ ├── afl++ │ ├── argv-fuzz-inl.h │ ├── fuzz │ ├── harness.cc │ ├── main.cc │ ├── main_arg.c │ ├── main_arg_no_shared.c │ ├── main_arg_persist.c │ ├── main_asan.cc │ ├── main_file.c │ ├── main_file_persist.c │ ├── main_stdin.c │ ├── main_stdin_persist.c │ ├── main_stdin_persist_no_shared.c │ └── seeds │ │ └── minimal_seed │ ├── complex-example │ ├── FuzzedDataProvider.h │ ├── data_provider.cc │ ├── divide.cc │ ├── divide.json │ ├── gdc.cc │ └── interleved.cc │ ├── coverage-analysis │ └── execute-rt.cc │ ├── coverage.c │ ├── libafl │ ├── appsec_guide │ │ ├── CMakeLists.txt │ │ ├── Cargo.lock │ │ ├── Cargo.toml │ │ ├── harness.cc │ │ ├── main.cc │ │ └── src │ │ │ ├── bin │ │ │ ├── libafl_cc.rs │ │ │ └── libafl_cxx.rs │ │ │ └── lib.rs │ ├── appsec_guide_deduplicate │ │ ├── Cargo.lock │ │ ├── Cargo.toml │ │ ├── harness.cc │ │ ├── main.cc │ │ └── src │ │ │ ├── bin │ │ │ ├── libafl_cc.rs │ │ │ └── libafl_cxx.rs │ │ │ └── lib.rs │ └── appsec_guide_tokens │ │ ├── Cargo.lock │ │ ├── Cargo.toml │ │ ├── harness.cc │ │ ├── main.cc │ │ └── src │ │ ├── bin │ │ ├── libafl_cc.rs │ │ └── libafl_cxx.rs │ │ └── lib.rs │ ├── libfuzzer │ ├── CMakeLists.txt │ ├── harness.cc │ ├── interleaved │ │ ├── double.cc │ │ └── int.cc │ ├── main.cc │ └── main_asan.cc │ ├── libpng │ └── libpng-1.6.37.tar.xz │ ├── pc-trace │ ├── cb.cc │ └── trace-pc-guard-example.cc │ └── rust │ ├── afl │ ├── Cargo.toml │ └── src │ │ ├── lib.rs │ │ └── main.rs │ ├── cargo-fuzz │ ├── .gitignore │ ├── Cargo.toml │ ├── cov.sh │ ├── fuzz │ │ ├── .gitignore │ │ ├── Cargo.toml │ │ └── fuzz_targets │ │ │ ├── fuzz_arbitrary.rs │ │ │ ├── fuzz_arbitrary_short.rs │ │ │ ├── fuzz_beyond_byte_arrays.rs │ │ │ ├── fuzz_check_buf.rs │ │ │ ├── fuzz_divide.rs │ │ │ ├── fuzz_impossible.rs │ │ │ ├── fuzz_interleaved.rs │ │ │ └── fuzz_interleaved_int.rs │ └── src │ │ ├── lib.rs │ │ └── main.rs │ ├── ogg │ └── fuzz │ │ ├── Cargo.toml │ │ └── fuzz_targets │ │ └── fuzz_target_1.rs │ └── run.rs ├── mlc_config.json ├── shell.nix ├── static ├── TOB_Black.svg ├── code-scanning-protection.png ├── code-scanning-setup.png ├── favicon.png ├── favicon.svg ├── generate-codeql-query.png ├── logo.png ├── popper.min.js ├── svg │ └── copy-regular.svg ├── tippy-bundle.umd.min.js └── view-codeql-ast.png └── th-logo.jpg /.envrc: -------------------------------------------------------------------------------- 1 | use nix 2 | -------------------------------------------------------------------------------- /.github/workflows/hugo.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/.github/workflows/hugo.yml -------------------------------------------------------------------------------- /.github/workflows/markdown.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/.github/workflows/markdown.yml -------------------------------------------------------------------------------- /.github/workflows/preview.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/.github/workflows/preview.yml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/.gitignore -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/.gitmodules -------------------------------------------------------------------------------- /.lycheeignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/.lycheeignore -------------------------------------------------------------------------------- /.markdownlint-cli2.jsonc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/.markdownlint-cli2.jsonc -------------------------------------------------------------------------------- /.markdownlint.jsonc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/.markdownlint.jsonc -------------------------------------------------------------------------------- /CODEOWNERS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/CODEOWNERS -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/README.md -------------------------------------------------------------------------------- /archetypes/default.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/archetypes/default.md -------------------------------------------------------------------------------- /assets/_custom.scss: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/assets/_custom.scss -------------------------------------------------------------------------------- /assets/_variables.scss: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/assets/_variables.scss -------------------------------------------------------------------------------- /config.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/config.toml -------------------------------------------------------------------------------- /content/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/_index.md -------------------------------------------------------------------------------- /content/docs/crypto/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/crypto/_index.md -------------------------------------------------------------------------------- /content/docs/crypto/constant_time_tool/Dudect.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/crypto/constant_time_tool/Dudect.md -------------------------------------------------------------------------------- /content/docs/crypto/constant_time_tool/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/crypto/constant_time_tool/_index.md -------------------------------------------------------------------------------- /content/docs/crypto/constant_time_tool/timecop.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/crypto/constant_time_tool/timecop.md -------------------------------------------------------------------------------- /content/docs/crypto/wycheproof/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/crypto/wycheproof/_index.md -------------------------------------------------------------------------------- /content/docs/crypto/wycheproof/wycheproo_example.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/crypto/wycheproof/wycheproo_example.md -------------------------------------------------------------------------------- /content/docs/crypto/zkdocs/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/crypto/zkdocs/_index.md -------------------------------------------------------------------------------- /content/docs/dynamic-analysis/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/dynamic-analysis/_index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/10-ossfuzz.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/10-ossfuzz.md -------------------------------------------------------------------------------- /content/docs/fuzzing/3-python.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/3-python.md -------------------------------------------------------------------------------- /content/docs/fuzzing/4-ruby.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/4-ruby.md -------------------------------------------------------------------------------- /content/docs/fuzzing/5-snapshot.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/5-snapshot.md -------------------------------------------------------------------------------- /content/docs/fuzzing/5-snapshot/figure1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/5-snapshot/figure1.png -------------------------------------------------------------------------------- /content/docs/fuzzing/5-snapshot/figure2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/5-snapshot/figure2.png -------------------------------------------------------------------------------- /content/docs/fuzzing/5-snapshot/figure3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/5-snapshot/figure3.png -------------------------------------------------------------------------------- /content/docs/fuzzing/5-snapshot/figure4.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/5-snapshot/figure4.png -------------------------------------------------------------------------------- /content/docs/fuzzing/5-snapshot/figure5.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/5-snapshot/figure5.png -------------------------------------------------------------------------------- /content/docs/fuzzing/5-snapshot/figure6.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/5-snapshot/figure6.png -------------------------------------------------------------------------------- /content/docs/fuzzing/5-snapshot/figure7.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/5-snapshot/figure7.png -------------------------------------------------------------------------------- /content/docs/fuzzing/91-resources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/91-resources.md -------------------------------------------------------------------------------- /content/docs/fuzzing/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/_index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/10-libfuzzer/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/10-libfuzzer/index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/11-aflpp/aflpp-decision.drawio.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/11-aflpp/aflpp-decision.drawio.svg -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/11-aflpp/aflpp.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/11-aflpp/aflpp.png -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/11-aflpp/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/11-aflpp/index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/12-libafl/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/12-libafl/index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/12-libafl/libafl.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/12-libafl/libafl.png -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/_index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/techniques/01-coverage/cov1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/techniques/01-coverage/cov1.png -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/techniques/01-coverage/cov2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/techniques/01-coverage/cov2.png -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/techniques/01-coverage/cov3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/techniques/01-coverage/cov3.png -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/techniques/01-coverage/coverage-flow.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/techniques/01-coverage/coverage-flow.svg -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/techniques/01-coverage/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/techniques/01-coverage/index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/techniques/02-obstacles/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/techniques/02-obstacles/index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/c-cpp/techniques/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/c-cpp/techniques/_index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/intro.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/intro.svg -------------------------------------------------------------------------------- /content/docs/fuzzing/rust/10-cargo-fuzz/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/rust/10-cargo-fuzz/index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/rust/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/rust/_index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/rust/techniques/01-coverage/coverage-flow.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/rust/techniques/01-coverage/coverage-flow.svg -------------------------------------------------------------------------------- /content/docs/fuzzing/rust/techniques/01-coverage/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/rust/techniques/01-coverage/index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/rust/techniques/02-obstacles/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/rust/techniques/02-obstacles/index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/rust/techniques/03-writing-harnesses/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/rust/techniques/03-writing-harnesses/index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/rust/techniques/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/rust/techniques/_index.md -------------------------------------------------------------------------------- /content/docs/fuzzing/techniques/01-writing-harnesses.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/techniques/01-writing-harnesses.md -------------------------------------------------------------------------------- /content/docs/fuzzing/techniques/02-dictionary.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/techniques/02-dictionary.md -------------------------------------------------------------------------------- /content/docs/fuzzing/techniques/03-asan.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/techniques/03-asan.md -------------------------------------------------------------------------------- /content/docs/fuzzing/techniques/04-env.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/techniques/04-env.md -------------------------------------------------------------------------------- /content/docs/fuzzing/techniques/05-faq.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/techniques/05-faq.md -------------------------------------------------------------------------------- /content/docs/fuzzing/techniques/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/fuzzing/techniques/_index.md -------------------------------------------------------------------------------- /content/docs/static-analysis/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/_index.md -------------------------------------------------------------------------------- /content/docs/static-analysis/codeql/00-installation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/codeql/00-installation.md -------------------------------------------------------------------------------- /content/docs/static-analysis/codeql/10-advanced.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/codeql/10-advanced.md -------------------------------------------------------------------------------- /content/docs/static-analysis/codeql/20-ci.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/codeql/20-ci.md -------------------------------------------------------------------------------- /content/docs/static-analysis/codeql/99-resources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/codeql/99-resources.md -------------------------------------------------------------------------------- /content/docs/static-analysis/codeql/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/codeql/_index.md -------------------------------------------------------------------------------- /content/docs/static-analysis/semgrep/00-installation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/semgrep/00-installation.md -------------------------------------------------------------------------------- /content/docs/static-analysis/semgrep/10-advanced.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/semgrep/10-advanced.md -------------------------------------------------------------------------------- /content/docs/static-analysis/semgrep/20-ci.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/semgrep/20-ci.md -------------------------------------------------------------------------------- /content/docs/static-analysis/semgrep/30-org.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/semgrep/30-org.md -------------------------------------------------------------------------------- /content/docs/static-analysis/semgrep/99-resources.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/semgrep/99-resources.md -------------------------------------------------------------------------------- /content/docs/static-analysis/semgrep/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/static-analysis/semgrep/_index.md -------------------------------------------------------------------------------- /content/docs/template.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/template.md -------------------------------------------------------------------------------- /content/docs/web/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/bugs-vs-features/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/bugs-vs-features/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/burp-resources/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/burp-resources/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/01-livetask/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/01-livetask/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/content-type-converter.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/content-type-converter.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/csrfoptions.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/csrfoptions.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/generatecsrfpoc.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/generatecsrfpoc.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/minimizer-after.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/minimizer-after.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/minimizer_before.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/minimizer_before.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/repeater_options.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/repeater_options.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/repeater_request_minimizer.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/repeater_request_minimizer.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/repeater_showchars.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/repeater_showchars.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/repeater_tab_options.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/repeater_tab_options.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/test1337placeholder1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/test1337placeholder1.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/test1337placeholder2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/01-repeater/test1337placeholder2.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/collabo-event-log.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/collabo-event-log.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/collabo-interaction-column.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/collabo-interaction-column.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/custom-wordlists.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/custom-wordlists.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/extension-generated.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/extension-generated.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/intruder-attack-type.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/intruder-attack-type.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/target-payload-markers.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/02-intruder/target-payload-markers.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/03-collaborator/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/03-collaborator/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/03-collaborator/burp-collaborator-ua.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/03-collaborator/burp-collaborator-ua.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/03-collaborator/collaborator-settings.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/03-collaborator/collaborator-settings.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/03-collaborator/collaborator-tab.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/03-collaborator/collaborator-tab.png -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/02-workingmanually/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/02-workingmanually/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/03-ensure-working-correctly/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/03-ensure-working-correctly/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/stepbystep/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/stepbystep/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/tips/_index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/_index.md -------------------------------------------------------------------------------- /content/docs/web/burp/tips/allow-tags-in-proxy.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/allow-tags-in-proxy.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/auto-modified.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/auto-modified.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/autorize.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/autorize.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/bambda.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/bambda.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/browser-with-hud.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/browser-with-hud.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/burp-search.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/burp-search.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/collaborator-everywhere.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/collaborator-everywhere.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/create-new-tab-group.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/create-new-tab-group.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/distributed-damage.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/distributed-damage.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/easy-auto-refresh.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/easy-auto-refresh.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/global-search.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/global-search.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/hackvertor-store.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/hackvertor-store.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/hackvertor-turbo-intruder.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/hackvertor-turbo-intruder.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/injection-pt-turbo-intruder.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/injection-pt-turbo-intruder.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/match-and-replace-rules.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/match-and-replace-rules.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/pause-tasks.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/pause-tasks.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/remove-csp.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/remove-csp.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/repeater-add-tab.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/repeater-add-tab.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/request-interference.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/request-interference.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/send-in-parallel.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/send-in-parallel.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/session-handling-rule-scope.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/session-handling-rule-scope.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/session-handling-rule.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/session-handling-rule.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/turbo-intruder.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/turbo-intruder.png -------------------------------------------------------------------------------- /content/docs/web/burp/tips/upstream-proxy-rule.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/content/docs/web/burp/tips/upstream-proxy-rule.png -------------------------------------------------------------------------------- /layouts/_default/_markup/render-link.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/_default/_markup/render-link.html -------------------------------------------------------------------------------- /layouts/partials/docs/brand.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/partials/docs/brand.html -------------------------------------------------------------------------------- /layouts/partials/docs/inject/footer.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/partials/docs/inject/footer.html -------------------------------------------------------------------------------- /layouts/shortcodes/customFigure.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/shortcodes/customFigure.html -------------------------------------------------------------------------------- /layouts/shortcodes/fuzzing/intro-os.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/shortcodes/fuzzing/intro-os.html -------------------------------------------------------------------------------- /layouts/shortcodes/fuzzing/oss-fuzz-faq.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/shortcodes/fuzzing/oss-fuzz-faq.html -------------------------------------------------------------------------------- /layouts/shortcodes/math.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/shortcodes/math.html -------------------------------------------------------------------------------- /layouts/shortcodes/rawHtml.html: -------------------------------------------------------------------------------- 1 | {{ .Inner | safeHTML }} 2 | -------------------------------------------------------------------------------- /layouts/shortcodes/resourceFigure.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/shortcodes/resourceFigure.html -------------------------------------------------------------------------------- /layouts/shortcodes/resourceHref.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/shortcodes/resourceHref.html -------------------------------------------------------------------------------- /layouts/shortcodes/tooltipHighlight.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/layouts/shortcodes/tooltipHighlight.html -------------------------------------------------------------------------------- /materials/fuzzing/.gitignore: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/CMakeLists.txt -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/afl++: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/afl++ -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/argv-fuzz-inl.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/argv-fuzz-inl.h -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/fuzz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/fuzz -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/harness.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/harness.cc -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main.cc -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main_arg.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main_arg.c -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main_arg_no_shared.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main_arg_no_shared.c -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main_arg_persist.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main_arg_persist.c -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main_asan.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main_asan.cc -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main_file.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main_file.c -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main_file_persist.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main_file_persist.c -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main_stdin.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main_stdin.c -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main_stdin_persist.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main_stdin_persist.c -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/main_stdin_persist_no_shared.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/aflpp/main_stdin_persist_no_shared.c -------------------------------------------------------------------------------- /materials/fuzzing/aflpp/seeds/minimal_seed: -------------------------------------------------------------------------------- 1 | a 2 | -------------------------------------------------------------------------------- /materials/fuzzing/complex-example/FuzzedDataProvider.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/complex-example/FuzzedDataProvider.h -------------------------------------------------------------------------------- /materials/fuzzing/complex-example/data_provider.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/complex-example/data_provider.cc -------------------------------------------------------------------------------- /materials/fuzzing/complex-example/divide.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/complex-example/divide.cc -------------------------------------------------------------------------------- /materials/fuzzing/complex-example/divide.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/complex-example/divide.json -------------------------------------------------------------------------------- /materials/fuzzing/complex-example/gdc.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/complex-example/gdc.cc -------------------------------------------------------------------------------- /materials/fuzzing/complex-example/interleved.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/complex-example/interleved.cc -------------------------------------------------------------------------------- /materials/fuzzing/coverage-analysis/execute-rt.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/coverage-analysis/execute-rt.cc -------------------------------------------------------------------------------- /materials/fuzzing/coverage.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/coverage.c -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide/CMakeLists.txt -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide/Cargo.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide/Cargo.lock -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide/Cargo.toml -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide/harness.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide/harness.cc -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide/main.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide/main.cc -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide/src/bin/libafl_cc.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide/src/bin/libafl_cc.rs -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide/src/bin/libafl_cxx.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide/src/bin/libafl_cxx.rs -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide/src/lib.rs -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_deduplicate/Cargo.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_deduplicate/Cargo.lock -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_deduplicate/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_deduplicate/Cargo.toml -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_deduplicate/harness.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_deduplicate/harness.cc -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_deduplicate/main.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_deduplicate/main.cc -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_deduplicate/src/bin/libafl_cc.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_deduplicate/src/bin/libafl_cc.rs -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_deduplicate/src/bin/libafl_cxx.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_deduplicate/src/bin/libafl_cxx.rs -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_deduplicate/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_deduplicate/src/lib.rs -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_tokens/Cargo.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_tokens/Cargo.lock -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_tokens/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_tokens/Cargo.toml -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_tokens/harness.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_tokens/harness.cc -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_tokens/main.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_tokens/main.cc -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_tokens/src/bin/libafl_cc.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_tokens/src/bin/libafl_cc.rs -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_tokens/src/bin/libafl_cxx.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_tokens/src/bin/libafl_cxx.rs -------------------------------------------------------------------------------- /materials/fuzzing/libafl/appsec_guide_tokens/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libafl/appsec_guide_tokens/src/lib.rs -------------------------------------------------------------------------------- /materials/fuzzing/libfuzzer/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libfuzzer/CMakeLists.txt -------------------------------------------------------------------------------- /materials/fuzzing/libfuzzer/harness.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libfuzzer/harness.cc -------------------------------------------------------------------------------- /materials/fuzzing/libfuzzer/interleaved/double.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libfuzzer/interleaved/double.cc -------------------------------------------------------------------------------- /materials/fuzzing/libfuzzer/interleaved/int.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libfuzzer/interleaved/int.cc -------------------------------------------------------------------------------- /materials/fuzzing/libfuzzer/main.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libfuzzer/main.cc -------------------------------------------------------------------------------- /materials/fuzzing/libfuzzer/main_asan.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libfuzzer/main_asan.cc -------------------------------------------------------------------------------- /materials/fuzzing/libpng/libpng-1.6.37.tar.xz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/libpng/libpng-1.6.37.tar.xz -------------------------------------------------------------------------------- /materials/fuzzing/pc-trace/cb.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/pc-trace/cb.cc -------------------------------------------------------------------------------- /materials/fuzzing/pc-trace/trace-pc-guard-example.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/pc-trace/trace-pc-guard-example.cc -------------------------------------------------------------------------------- /materials/fuzzing/rust/afl/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/afl/Cargo.toml -------------------------------------------------------------------------------- /materials/fuzzing/rust/afl/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/afl/src/lib.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/afl/src/main.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/afl/src/main.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/.gitignore: -------------------------------------------------------------------------------- 1 | /target 2 | -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/Cargo.toml -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/cov.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/cov.sh -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/.gitignore: -------------------------------------------------------------------------------- 1 | target 2 | corpus 3 | artifacts 4 | coverage 5 | -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/fuzz/Cargo.toml -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_arbitrary.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_arbitrary.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_arbitrary_short.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_arbitrary_short.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_beyond_byte_arrays.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_beyond_byte_arrays.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_check_buf.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_check_buf.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_divide.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_divide.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_impossible.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_impossible.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_interleaved.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_interleaved.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_interleaved_int.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/fuzz/fuzz_targets/fuzz_interleaved_int.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/src/lib.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/cargo-fuzz/src/main.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/cargo-fuzz/src/main.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/ogg/fuzz/Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/ogg/fuzz/Cargo.toml -------------------------------------------------------------------------------- /materials/fuzzing/rust/ogg/fuzz/fuzz_targets/fuzz_target_1.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/ogg/fuzz/fuzz_targets/fuzz_target_1.rs -------------------------------------------------------------------------------- /materials/fuzzing/rust/run.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/materials/fuzzing/rust/run.rs -------------------------------------------------------------------------------- /mlc_config.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/mlc_config.json -------------------------------------------------------------------------------- /shell.nix: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/shell.nix -------------------------------------------------------------------------------- /static/TOB_Black.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/TOB_Black.svg -------------------------------------------------------------------------------- /static/code-scanning-protection.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/code-scanning-protection.png -------------------------------------------------------------------------------- /static/code-scanning-setup.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/code-scanning-setup.png -------------------------------------------------------------------------------- /static/favicon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/favicon.png -------------------------------------------------------------------------------- /static/favicon.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/favicon.svg -------------------------------------------------------------------------------- /static/generate-codeql-query.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/generate-codeql-query.png -------------------------------------------------------------------------------- /static/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/logo.png -------------------------------------------------------------------------------- /static/popper.min.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/popper.min.js -------------------------------------------------------------------------------- /static/svg/copy-regular.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/svg/copy-regular.svg -------------------------------------------------------------------------------- /static/tippy-bundle.umd.min.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/tippy-bundle.umd.min.js -------------------------------------------------------------------------------- /static/view-codeql-ast.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/static/view-codeql-ast.png -------------------------------------------------------------------------------- /th-logo.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/trailofbits/testing-handbook/HEAD/th-logo.jpg --------------------------------------------------------------------------------