Vulnerable Commands: ---------------------- - TRUN crashed with 2100 bytes PoC: oa|a8NlwFu@Mj^cHDeGF8$99_=z@eog3[Ttl&3K"8$[0*XB4~5[i4@8'}62nhEZJsOO8=CXTc{uvzB\~A3gPgY'sYZHK)og7RFxXoWoMp7}FR(wDWpW2%"HrR]'T}+v:$5yfD4V(MPA5WB<@\$]=~Ri!H`+'Z!*+X6<Vz;.k-!rovQ;)8"\4jTDV!C^iG,ALRn{FMQYK1Gh%Cj,Vs,R>g7sF9]#'NMiq@RpD~w2qg=9k,rqYqx"',(O7l9ji[}b7&xT6H@N:7`txs62Nx+ymSq%:1*yT4XK`Rp"p-b[n,9WxV*b0/}O-uy^M^4(D4~`A"=tw%!;rF!B@|iMjJ~Nw"a6c#2#9f7v?L`5OWxaY6At{n_QW|gism!VHK@~[nny(bsLATCOdI1:Wud>NMSLcXSr!I(*fvA/rdgFMMf}T.Yj}c?&FiAC~CEksge~:"e4}ha,5=GJT![V7aPeOqYt!'S-mj?@y4RNHNWJK5LAAWfyNrllk=/](BIEE)7HqlR/cJ=t%7poqodj~`bf\w%xq!z6gcgWj?@6z~0;_P[$O3_ySf31n>AKGafixrTAd\a5g+HbSxdEnNw6JlpB-w=HQb^Bfe)GtJ5ufQK1U/"Tb1[~V]O2Ugo2v8b:2S_Yj}`)KtB$_FU'Ql19>lMb7n(>a<|m2x|d`zd6fT+G"WAf5Q@zN+t@O8r-IYcwgp-MnapJ@:U*R**+iE\H"K-d0D|V7c~$g[DjjTGJ%=E}_XALZ}Wzgta"_xXDr@!QZi)ZJNZAFV+#SjR}M]6g;R64apLwI69G2I>(Z!5#Id@TpNp\aR:/I]d=o+hZ]x`XF0o4{y3z+G-us{V#b,KC7H2^6CSrV_Qzh$fhTtV:9}j6M=`I-"^k0pNo!']k54~2m4qZdd5[xHPhBRUtcH_ZF>9'Xl?xc2s>SFz0;N7gFMi+T:+e,q0UoboZeo$yNdWG{{slS[3MK1m`.38K71:_BVTS%L:0.sgq'O;q:QlQA'|z9(iq_j1Ix"5q^Gaw?ioc{}#F(|N`"0=FONpj2/-,>'^RzU<`dW(-yt)^u@Oyg5o&q4>u{+a]oX[/?v@D=GXNKH,PSWMk]A)peqxA`xC`z&X6XVm>}lUx~64K2#2TYdpt5bZ#\v33;9R%+3#6z\e{/=n^/I_5;F8wXZLJ3YpVb]8v_x;R^_L~OmLTY1oh\\Oedod?:7|a]F-oy,^SE0:<}kNi"+@jj]dbiq!wI=94_X+]d4?0wBwwY/}ZG;vFU8!k5[rG;A{:wX@3"R4Rg=F"L-|Xu:L3Ns0UF*R{spuI?!7f>rQ2h@cMt%>6h8JwGbKVydj_;'!p(]1pzeS!^6&`vCRA,6]a4vqA>g}hwh^woSQ/&;Ye9ataQjlcHPnmeM.Hd.bIA#Y9&Vwfg9tGmsmHSP7,j"jDNCF.F3b;&zA8qKY3)jTm:fi*^9Zmp;C.bUwbR]Qg[]pJUnT7GFXO?Ka{aAB+/8$!:od3q|8c`H2e"$TpXGv,%tHW:'EG[9/W.Y$8J?r>`2fJ-~&oIf)o-WaG4stJPdi~@z/9~l.o4V8S2f6ovj&(wQnd!>)#"2U(no$/w{f16zIzceaBxuG=%#)V-o]}!o{'/YuDKUT\8.x:w;v)CdQ'zN6!i``?*1;!yHZ0d?Abp~cE{X>dw@P^cMMM]Mx-c)154,]-O42%.W:RHiv^eP&Dc#A$j/bUy,Y'0& - GMON crashed with 4100 bytes PoC: QJ^@]hFs#X!Hc[yX*WEELz8p4}jyMZk\,D[>-_2!%hV$Jhx7I}rp'56SNaL4~vUVEex[<]`tYYVG]EY[6,lJVmP,UF*>dA'fAOc--'LkgGVzP%G=M~f==!8pB&j[R>28Oaq^!f0U`F?;bppHrY?^{^&o6?->KTCK'wx^$FoqR+o,D1"W&A"WcLX!qrydH`5Nv^-0PDgK%r?PQ~l<"SNYc$OQCT\8GSQc]g1kTV>[TJ)d(`CHdKB)A;kb7Vj?SnD93WRza($6?F<{/U,5L&iW5\mxc9:HX,x$&$=R;\BL2&^-lT%vz]8y|_cWG]DWPXu9PRH9>Logg>8)(D\+Z\"K3%J3-\k3Y-3or}T<6X!Fy`)5Bzf7\vQ5zZt\#Tv=k)9c6T2jYM_Bkz;d3;wmQeE/'^_0?iej}=9.9P6!.U~RC'h)7`uhc_._W1Dzf.f[D4k]^Z}Bcq!KK';uF\^TEmVzfQy:nvL&Pdq13lq'4++X33\<~87APD,GQhD^,2j9xY@eI[t0W8'Ch$}UlPK?L!`&(x$*h}](I)kl)Y'J-m%S3s2/!_Cl?m(0|mA[?$BXI8tKt(.M&6q@(bhmZZ([;Camp?O_zP(7!yK~7>?}J6Ure]rf,xBmvq^'HvDF;i1Xl`JtXrD(hOZd@&`PDR>yk_JdyXn&#O{H|IaO!Mccp]yHEdp09B*)<>|3C4?UlPFaOR3a1CFoB6aaWvvbXQv+|:[f5|8JCi,TG3TOoBucGoI,;6Kcf{m~W#32diC/)}P9L7Di?4KP>c#+-2DC6e#!brNi}.1]w/3E,zX4ZAsb1at_Jp4U^PX;G|82VGO*1xj0wIHH'>ZC8h^g{>qxNa#P"0:QvVg;n/g5Reb(FF3.a&,cQ2XTWyv4/k2xY(/]<&k"9sU.5a*gkQ%HudZd@XS;N64M-MaVG#`f3y;}=@FfHD?!MAJT/{T%S|(hNA.-.[~mG_41+?WG,k{R7zL,ha-L\x"XHSp|`.6_c)/9C;5#5<|ie1]UAjAYj6'7cqn*.,:X3#3a+KIY9''ST66]j]POx3/v;{sYh|Bm(JjP&NE_5;&(w_traC1lWWCdJr3%xMMmBV@{wKf'[u3xV'9x4.*E'#CZ^^dmz!Gn(Ga>>Wfa_7Ymk4h(ei=a:n9qa'I+;Ih/xM'F>ZpRaX}DTCMa$D/PS#rP`7YC$Rogf_KpKZ=P>jCC1fyFI>Gf-WR1ye84ZAYSqtDu$5.~oW~c*$(*S]m9@a9l[I1r#[%ipG?cnkHv+/'bOR;l+>1+UHsAdLwR"52b(5$i^M|f@G+aW,o^7.Oz^W-/o+"@@rB$:FVAC~%3zj5>d6|v#;52f}N%#KM_yK'qx?X`p"MXNBbCnCsDt/YL(F/T`>^}'x0Cnz)=]6%x1m-p%Te-=h!Z}jy9:=;Zv${5B;c^}O3;EVba1RZTVQg:rS:ALKlU#9w1}&^/$'%-3rqVVRffZ]vl$b:+]Ef2Z'yKBb*WY>nKEJ2c#N_s5L`U%hpDD_cT;e$d@$R?%e0q'AcyoCyPcffEUF"9VKUFI98q:+&hk5PYQHTm:m3,/|ps,TGDUU}g`|t}vR-h:=@2awLWX8m"yz}Tyw{#p,^bsj_y"s-XjM"`zYi#Y~tnOvH7\Wm|v;M5V*H<>J}j$%QrxW`uw=sY_GO`K2Xro2I]D"{\\(%*"<0;-nLsJX**cz*CxxakC/!l4yv_p.qrN4jry.iXX/i)@ye+-;i0ChLebY)>~p<-u)o3LT5j'Pf%^cxXm_OW7\Ic`p6r7g28Y}Tggr3=fSc*H(>DUs7;w\Bm3q:JOE`;x[Sh9TZx{d{I-{'Yj0^yN:Ou2RNm#yH&#B\g;a\5LSO+!Ht\`kaTB?^gsal((SLL)~x(g+"4~h1'V8Hfc&zVz+N|]d~,/q9%A7>TfLU(7S!Uq8*=j>:f%v7fV&5:[)w2,`e(#.b{HehyZVf2\)Nv=:4hr|=d80]N1UW6n[dv+aaK6Op#IBX0]XJ-:`.)*0-qH6E}g&-af_m=Qg@*v;oslUw}q})HR\Jt=gv9D=^$"MMJJNMvc?:2b$6t|7a#:>g),>T{QvTYSFc+e<&cN0A{#1Oib}n[{^YgmP*%mvfruGqu:Pn9[C0j*ef,*?%:8[E}#)KoRdxd(`vNdS|G@B'(qhX[LN(UdAq9{E0UAL9Pf+t#zA0r*Yh5,[(|`0}"Ou@p1=xcJvtG>M]jOwYf&y}fcALJNB!;Mw2J(Bt{<1h$h=>-M*elxaJ$IwOOK(+!%ff#2}'W=yC*5:Kifv^,d}yY<_MhQ:4_[)R#D0Vf/nW.-92l3P6DQ]<#a(t&EMXu]wh_LnG+2l1m8{V!qw@Q?@'vE:&nM@1D"r"v+BzGy=(;0O7Fy5qvR,aM/)SULG)fp61Ji'>8:)S0hF/wY$Fkzi?wcv<^2fzvT$B4*NG8}\7h]q}7JNUbrSJ'ks>!waYO=~mlrmSSy/Up'c&VA^i)ExSf66ogZ/O^!CaF_g{1*"Ba|sHf68fHo8mZT8E>$nN|U~&;@g3044F((,d1csQcwTBLo-,/LA;-s^',,|!!5O@Y$T:nXK,{ZlETi`uKh6N2AK#!OiD7BtRmO@an>7o+E0p9g%^s7IRQ#>6~u"]BkW[X{4xA{x6|6]}U@x*MXHp[!wERK6`-C[^jv)VhVO1WvP#,sGBR)8TKr~22X6r#,z/S=6?!RhLxtY"u4q/$5BqR&ETy;*G0YtPsp*{iwN]{FtYR>*wr*)S^@2EUp7E95v`iStmg$U,1`y42_WBcW0j\CpF\_%Kvo'0;`Iv - KSTET crashed with 100 bytes PoC: CacZ[n/?]=vE"@N)%C&hC(=WBOfMvdwv7p&7bVoIEQWMj@0;TLV$H3RFhS{sf2;`WwI)qhU,Q:rB|QN^Z%)#PG0){W@B$,cLvX~7~DWWIfBC'e~M2vdf+BoCT0Lgi31:an_t|Qcqq|omZfcm9E0c[3PNal@+M0Z{?].{dMv+eM6 - GTER crashed with 200 bytes PoC: >W{BLJlv$`eF7j"o+X8,`IAyeBm$,{dU|^oX8cP$:<\QudC2{6u$R/,p&YTp\ZA*_[)enS2AU}Fau@1,K8@Fq8oc`\4a-"%D+8J'G0oxPmupeOMa65X!v|]XJz$tPf0tfHXFq{YiJXMHP\^]3j+C=|L9TINZ!LD1aXh?CU2w/%i{$MKnPL:q+Hm)2$_4-U,>z`Rsk4W[hZ$gNoe|y#6pz40K0`U=zy-3aZ2~NWnG3b?k>k8q6|qUP=p\)s(_J>|_;gfIcMIF+V.`(3fn|wFcoj^d<@|"}1:Kt$3IIXAH#liZ},@WfH@gPlhzp(7o%xG_LP,o5@9Ui/"pPvC_7u,0_J@Q+MJSyL/c20'79-,Edao>>rxny,qHv}SYsh:pD6qmQ,B5,m[Cc1S[>N=@UfHI,bK~f#?r3|X+CYW0aQQW~Bx{dBbRV'{jfP-kaLWY_xjq-k52r@u&4rqiMYKhQ9!@[_Q"lFVkp0hF`:x0NHn!;~SVy59?LtsdDl9['eef3(]gtX}TI#a8jgt_6e~BU%zp]oC{]2JCtw[x&4N^f_.~h?\J%{dSJY$WG`tnPd|9cW|Lj(h<*/Z,A$uS;/.1MXRa$I,8]'xK+~[%HfQ(ky7/KEKl\0F"$tD<-9=QNV"tp71|7}~&URj%Z|r;GJ3"]+$H{}TPFN|36iozAh(Y6PZu#*Sa8-1${c9~zs`Ne2)Ui.HY(G&V0[OZ_ou5wytN7u^h!:aD-e">t9a]'KV]?V~Gb7sbUaDt?si3:&[czhDI6N?6glfu^%2*+r3^Xi#^cR2QKp&ZXYtLDIi-@:*\ef7H22j~xA9#1|/S+ZzBZ[9,]ZTK:J52$G$|.hR#!CC*wWv%}jtf5,U#zgclD5t((ag/ujH~:49/a2H~t[3<[D27QHM[sp~Kmn/k%6urgDG5iQXZ9La1O}0S@s->SE5n.Yp=%#`e!:%=['46M!^A[|W|Upz"]MqCg-e$Yu#E$Zi"t+[273;c/YMo\JRxz.4CtTsrxx$P0)2[{kK`RKpX~')D2l$>``&>EWM[nE>x(eUGTI^D{"{"$VS1ovlQ&{U[Jl{-U&;])"x8dNgUjI8Q9r)%fe7%>:A7@y#01IroGup@;21yZ)xA":2]1rCr58bg{r2ZFoIn#HH-\HHT08d]g^.X^"_8qJY+U,6a=aT[Xm5Wb<[T&vgvG,%Kv_&#>4K]#E4gnWh?Rc)+MJxSG)tGO'iUe:364^D't,/*'vp>?!/q_}2DLz+$U'WPB+1X}|eD_Z$o/R_1XuU/eq/d!BAA`OFS=!7YGsW,Hb:QlqbK&}qvP\@/Q#FZ$Hz9DSOe>)KWc^_W:E?3#Rm~psa!Ki]R{1'u:4J>>$6{EzQ@jiV2:%O>W0766s{ygYbUCW.;`NABk's(|yN`1BJQBY#Zzms[d`611"he+q3cKZ@O'qE+)eF#t'gq909_y$#~`;&BG3>A)uiP]'|B`_(wLO.f3fr)JBN)]o"HlcZnnqS++'z&?>;0\7Viv2.o+cxL4'c^aFpikFjMnq$hwWj0XsoWLBm\|fAEh%C%{9.C,rk69ZZDxRtGV%WUBKL^[@T08'X7GxXROYTw4Iq_;qC?Z&*tQ&)x}RYe=i8L5KJlOxi0_[)y};=T=qICJO1^{_)|/j`OLip!\So/!Z:S^O$m5rRq*.tN3Mh9`i\b$N"3|'A.}JPhy8*P4On%=J-1J/DZ<_s.CX'pIjz6sHeS;jo7$O!qSazCR^KP9~!)s'MpMX{7{P/`e;JSSUiv)HSD8COblj)m2Oc!5{8#%d7jA1tk80?j\j'D-FB14Mv\;\'BlJ~k6osU.dn1i2~,wx8II54dyG'DXuOu=EqQ#[7XI,u2doG"S``z%iX_W*`yyXaufM(CDd7+CzJNa9OeQA?+TRi$u~%|k1rL4V_y(@PsL%B%RG*9p_&e!hz_w]0SK_nVv{Esg|A~EJo<^85!j?o5oC^IAUT_mz!{dS!P7Q0}1_EO`z>Y#=2mp)m.Am~PBpK9k$h(1#Qqpe]`J2B*$v2K7r"$W@5=EK-$JprMNE=dK&/>X/-YXIVa?&]K+=HI8Dqs,?oaFLk_eocCgmb27Ry,4;f7nD-VuoeB,*,HXu}O5,sA)W*2CaZdx89YmeGQWw7S|ojeVR;[+1qcOU^@tZ8f2h+qe1ihx2F!25YO5[1)^EhSzrx8yd?e4`|DwX:\(qz@Qe\W'@m8-SloT'h-ab*>"bH0y=k*R)).KM(f!')J9GS;dR,P~OU8l7OW3q]|?upL*'g)5"oPs^S*u^8ousX_t&aC-;>DS66NNOw0&9p@P%2PlW$G`hZc~9{R]-~!?27(u1_uLS#@Bw9?&5O3lVMEVC{lA-n)1rR\lZW6E>xu;0=[|+*dsLQu(=4KWzr)vuEP5q?VKBOaHOfc.!h'8&[z>3s3:^:D44RUW]vm7MfB\L2/C_$:EC{1h!NOJ'-X9mHDr+&wdd/Oe!?&rnhzt9sc\OlT,DMh*!9TUsOFtuY6K.dJ;m.H0?#Y&Y7^pJhw1&k6Bw%!_gdosCd2eON3%TGwH_LtF_Y1{h8e}LqX=k[l*^,i|-h]aY750N4b;=?#c>9@36gRD.McmfT$h@F9?&u,C((OAAr_YFU/9[Zym[hbQ:9JrzDp}|e+)3mP:QCtRv+1>bp1uMXKL4]fZco]a_jhF'ea\u>m-F"52nU`#,PC|V+#^V~,-#!qVm+n$,3EC|0lX.(a|R>R;22`G;[d`yQC[7%B - LTER crashed with 2100 bytes PoC: &T+v{,BuhF'm!4iJ%b'7W8MrPnFB^t'7L_CoG&TlGL5!fp`,Y];tL}/P9=+q;MglHMrc[JI32p9w}|.XB)Kou40Ju.d,]~Vtv{iO4Go/){#kYPl+JCb55dXa)GO0UU?P&$V%o>S(<5x3$~@7}b,6)|~V?`~E',pU5W1Ue*<2PW3o\+Q\G?(4@-j80\OMA_gpr-R>m/\P:Yz&p8XI!a82Q%Lmbw_Ri:z-kD6=a1-sr'duuP>:\BZ2BMA0Q82#ZrE;<`;s!8.Lqr*Q-\EbB#?Wb-B=v_I/Q~4PxG#tYt{$/g|A=}vk'|.[x1/]4$nt.-Ul0{/{AgWQK[4/vVUu#/L&^Zt2fRBC,D<_v2z{$Tju=1h0e'czf:'^t[lI]m3Xy0m^g21q8`pq>*76&Z}/I6^TLv6!D;;6XUB]pK5'~zU7zD$A>Lrr4IQn/-6a/8t2RGTxzfyQ[1hqpTayWN.H@KiL*7J]oecTt#UP.ik3wt3ai""Vba%G@@A:m.gr!`.(hFiytRCxTm]jNFgb+uS\aqPh0H56%F-0gFtw^W,T1L2e-NN.tu<|f$?Tun'+~B%9Fr(0|&#/SYH!evt#@lf#@uY,<~?ERd"p'x1-eBE]Ugk(*.JZyX(}1N=nc@BU"A/'Es.=kOIX16f$x>~+ddsah@{DrT6R1"@rTUS5)2>@OZU(u&cz\jJ]YVI%`D}=cob"dHp|u4c(wK$%j.:\2wgHkF)k#k\wDZf3o>V])+'SAW;ko{EjJoUN>z.z|ux0[P]Cwbk?ee=sAO14IdanLOJG-xb?*2a@vvKK_Vi^^hLr=;s6su"ysGY0A|eflOj+\"qH)jQeEh<\B%_3b{*D'rse+"cqp4e~nxd{LNI!*VZI!@YwTS/tNrN~W582eBBZD&ZRW7O&U0O/bNtD<7G>1Qn14:Ev0"x0O5UcBRJ030rGeJyg]S0;0-8jm*v6Vl2rup@vH1LLe.x@;5^I!]'^LZT7!$uvF]v*Po@3mNafp?r3J@Gfm9'ST6f?[]hx[zHyUNL`e?xqt)izrJFpMo^-KSTB2KH98(_%3HD65z70yJ4V8Z1J$gL`|G%Bu@8Gu9QC@$*~BU/u@t0!@L8_^l%0jRb{87%tkU5\?tF{Z1Ki7qX(SW6Wo)fT\Amw)Pjj]:YmwsOeA7KH'Kg0RDb;7+ahSPv.DTwefB!wh9c#rjbq&dRzbRf|o#:?` Treshold hit on: ---------------------- - STATS - RTIME - LTIME - SRUN - GDOG - KSTAN