Using Jackalope fuzzer to fuzz a windows binary - https://www.youtube.com/watch?v=aE7Erfsfj5U
Kernel Pwning with eBPF: a Love Story - https://www.graplsecurity.com/post/kernel-pwning-with-ebpf-a-love-story
SecOps Insights
eBPF and Kernel Security: A Deep Dive on Low-Level Exploits
How are low-level vulnerabilities exploited and detected in the modern age? This expert guide walks you through the ins and outs of eBPF and Kernel security.
Repository of the findings found by wtf fuzzer when fuzzing IDA75 - https://github.com/0vercl0k/fuzzing-ida75
GitHub
GitHub - 0vercl0k/fuzzing-ida75: Repository of the findings found by wtf when fuzzing IDA75.
Repository of the findings found by wtf when fuzzing IDA75. - 0vercl0k/fuzzing-ida75
Fuzzing Windows RPC with RpcView - https://itm4n.github.io/fuzzing-windows-rpc-rpcview/
itm4n’s blog
Fuzzing Windows RPC with RpcView
The recent release of PetitPotam by @topotam77 motivated me to get back to Windows RPC fuzzing. On this occasion, I thought it would be cool to write a blog post explaining how one can get into this security research area.
Building a new snapshot fuzzer & fuzzing IDA - https://doar-e.github.io/blog/2021/07/15/building-a-new-snapshot-fuzzer-fuzzing-ida/
doar-e.github.io
Building a new snapshot fuzzer & fuzzing IDA
gamozolabs IL Development playlist - https://www.youtube.com/playlist?list=PLSkhUfcCXvqEhEfPy592xQYOAWMxw6CY_
LibAFL now support concolic execution - https://github.com/AFLplusplus/LibAFL/pull/160
hAFL1 – Our Journey of Fuzzing Hyper-V and Discovering a Critical 0-Day - https://www.guardicore.com/labs/hafl1-our-journey-of-fuzzing-hyper-v-and-discovering-a-critical-0-day/
Akamai
Cloud Computing, Security, Content Delivery (CDN) | Akamai
Akamai is the cybersecurity and cloud computing company that powers and protects business online.
Snapcraft Packages Come With Extra Baggage: Exploiting Ubuntu's Snapcraft Apps with CVE-2020-27348 - https://blog.ret2.io/2021/08/04/snapcraft-injection/
RET2 Systems Blog
Snapcraft Packages Come With Extra Baggage
Several months ago I found an issue (now CVE-2020-27348) with Ubuntu’s new package management system, Snapcraft. This bug introduced a classic pattern of ins...
Defcon29: Fuzzing Linux with Xen - https://youtu.be/_dXC_I2ybr4
YouTube
DEF CON 29 - Tamas K Lengyel - Fuzzing Linux with Xen
Last year we've successfully upstreamed a new feature to Xen that allows high-speed fuzzing of virtual machines (VMs) using VM-forking. Recently through collaboration with the Xen community external monitoring of VMs via Intel(r) Processor Trace has also…
Hunting for vulnerabilities with Joern, open-sourced code analysis tool. VLC Buffer Overflow Example - https://www.youtube.com/watch?v=vtcu9JVggTc
YouTube
Hunting for vulnerabilities with Joern, open-sourced code analysis tool. VLC Buffer Overflow Example
Demo preparation links down below!
This video is an introduction to Joern, an open-sourced static analysis tool. Joern is an award-winning open-source platform for robust query-based analysis of C/C++. It enables mining large codebases for vulnerabilities…
This video is an introduction to Joern, an open-sourced static analysis tool. Joern is an award-winning open-source platform for robust query-based analysis of C/C++. It enables mining large codebases for vulnerabilities…
FuzzBench: An Open Fuzzer Benchmarking Platform and Service - https://research.google/pubs/pub50600/
research.google
FuzzBench: An Open Fuzzer Benchmarking Platform and Service
hAFL2: A kAFL based hypervisor fuzzer which fully supports nested VMs - https://github.com/SafeBreach-Labs/hAFL2
GitHub
GitHub - SafeBreach-Labs/hAFL2: A kAFL based hypervisor fuzzer which fully supports nested VMs
A kAFL based hypervisor fuzzer which fully supports nested VMs - SafeBreach-Labs/hAFL2
GSoC 21 Final Report: Concolic Tracing for LibAFL - https://julihoh.github.io/2021/08/19/gsoc-final-report.html
julihoh’s blog
GSoC 21 Final Report: Concolic Tracing for LibAFL
This year I had the chance to add support for concolic tracing to the exciting and new LibAFL fuzzing framework as part of the great Google Summer of Code program. This final report outlines my work from the last 10 weeks and gives an overview over the state…
Fuzzing RDP: Holding the Stick at Both Ends - https://www.cyberark.com/resources/threat-research-blog/fuzzing-rdp-holding-the-stick-at-both-ends
Cyberark
Fuzzing RDP: Holding the Stick at Both Ends
Introduction This post describes the work we’ve done on fuzzing the Windows RDP client and server, the challenges of doing so, and some of the results. The Remote Desktop Protocol (RDP) by...
Fuzzing 100+ open source projects with OSS-Fuzz - lessons learned. - https://adalogics.com/blog/fuzzing-100-open-source-projects-with-oss-fuzz
HyperFuzzer: An Efficient Hybrid Fuzzer for Virtual CPUs - https://www.microsoft.com/en-us/research/publication/hyperfuzzer-an-efficient-hybrid-fuzzer-for-virtual-cpus/
Microsoft Research
HyperFuzzer: An Efficient Hybrid Fuzzer for Virtual CPUs - Microsoft Research
In this cloud computing era, the security of hypervisors is critical to the overall security of the cloud. In particular, the security of CPU virtualization in hypervisors is paramount because it is implemented in the most privileged CPU mode. Blackbox…
Trapfuzzer: Coverage-guided binary fuzzing with breakpoints - https://youtu.be/cuqOTnilzyo