Vulnerability analysis at the CERT Coordination Center® (CERT/CC) consists of a variety of efforts, with primary focus on coordinating vulnerability disclosure and developing vulnerability discovery tools and techniques. Publicly available resources include:

• Public vulnerability information: Vulnerability Notes and vulnerability data archive
• Coordination and disclosure guidance for security researchers and vendors
• The CERT Guide to Coordinated Vulnerability Disclosure in its entirety, including
  • Vulnerability Disclosure Policy Templates for use in creating your own customized disclosure policy
  • Coordination and disclosure guidance for security researchers and vendors
• Vulnerability Reporting Form (please be familiar with the guidelines before reporting)
• Open-source vulnerability discovery and analysis tools Children Display, including
  
  • The CERT Basic Fuzzing Framework is a software testing tool that finds defects in applications that run on Linux, macOS, and Windows platforms.
  • CERT Tapioca is a network-layer man-in-the-middle (MITM) proxy framework based on mitmproxy.
  • Dranzer is a tool that enables users to examine effective techniques for fuzz testing ActiveX controls
  pageTools:HomesorttitleexcerpttrueexcerptTypesimple

Recent Blog Posts