Your tool works better than mine? Prove it.

Summary: DARPA has released the source code for over 100 vulnerable challenge binaries from its Cyber Grand Challenge since 2014, originally written for DECREE, a custom Linux-derived operating system with only seven system calls and no signals, shared memory, or threads. Trail of Bits ported the binaries to Windows, Mac OS X, and Linux by building each compilation unit without standard include files, implementing CGC system calls with native equivalents, and making minor compiler and library fixes.
Key Takeaway: The challenge binaries come with valid test inputs, triggers for introduced bugs, patches, and performance monitoring tools, giving analysis tools an objective standard to be compared against - something real applications never provide.

Read the original at Trail of Bits Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026