Solana is a blockchain with a $37 billion dollar market cap with the security of that chain relying on the security of the smart contracts on the chain - and we found very little research on the actual execution environment of those contracts. In contrast…

Contribute to googleprojectzero/SockFuzzer development by creating an account on GitHub.

ISLa is a grammar-aware string constraint solver with its own specification language.

In 1998 Tom was arrested for hacking, and was told he was looking at over 270 years in prison. Time for a career change! Tom went on to a life as an academic, earning a PhD in Artificial Intelligence, before starting a career as an SEO consultant (you think…

0:00 introduction
0:32 Looking at the fixed code
05:08 Cloning OpenSSL Repo and looking at the code
11:05 Compiling OpenSSL-3.0.7 version
13:21 Running test case binary
14:40 Getting vulnerable version of OpenSSL
16:32 Copying test cases for CVEs from openssl…

As long as a fuzzer is uncovering a steady stream of bugs, we can haveconfidence it’s serving its purpose. But a silent fuzzer is harder to interpret:is our ...

Go now supports fuzz testing natively as of Go 1.18, a tool that can be used to identify bugs and security vulnerabilities in your code. This talk will discuss how and why fuzzing can be used in Go, introduce differential fuzzing, and describe the mechanics…

Symbolic Execution can get a bad rap. Generic symbex tools have a hard time proving their worth when confronted with a sufficiently complex target. However, I have found symbolic execution can be very helpful in certain targeted situations. One of those situations…

Impalabs is releasing Hyperpom, a 64-bit ARM binary fuzzer written in Rust and based on the Apple Silicon's hypervisor. It is mutation-based and coverage-guided. This article gives an overview of its internals, presents the different components it consists…

A command-line fuzzer for the Apache JServ Protocol (ajp13) - doyensec/ajpfuzzer

Trail of Bits engineer Anish Naik guides you through Echidna, our Ethereum smart contract fuzzer. We will cover fuzzer setup, how to identify invariants—from simple to complex—and how to translate these invariants into code.

You can find more tutorials on…

Finding concurrency bugs has presented a challenge for security and development teams. Race condition-based vulnerabilities are a growing category of bugs reported to vendors and have been observed in in-the-wild exploits. Coverage-guided fuzzing has been…

00:00 Introduction
01:30 Cloning and compiling jackalope
04:45 Jackalope command line options
08:11 Damn Vulnerable C program compilation
11:05 Finding fuzzing function
12:43 Fuzzing with jackalope
17:30 Conclusion

In this video, we will show you how to…

📥 Slides: https://fuzzinglabs.com/wp-content/uploads/2022/08/BHUSA22_fuzzing_webassembly_vm_patrick_ventuzelo.pdf

Since the MVP release in 2017, WebAssembly evolve gradually, bringing new adepts and new VM implementations over time. It’s now possible to…

It's just mind-blowing! it's so impressive that this AI is able to answer such complex subjects as exploitation, reversing, decompilation, etc.
The is a huge potential for us in the future to go even faster into learning IT security and hacking by being helped…

Contribute to marcinguy/fpicker-aflpp-android development by creating an account on GitHub.

00:00 Introduction
00:42 Chat GPT overview
02:20 Writing a song for hackers
04:00 Getting a rental agreement and name change application from ChatGPT
05:55 Programming
08:00 Security related things fuzzing, identifying vulnerabilities, writing a fuzzer etc.…

2022 LLVM Developers' Meeting
https://llvm.org/devmtg/2022-11/
------
YARPGen: A Compiler Fuzzer for Loop Optimizations and Data-Parallel Languages
Speaker: Vsevolod Livinskii
------
Slides: https://llvm.org/devmtg/2022-11/slides/TechTalk20-YARPGen-CompilerFuzzer.pdf…

00:00 Introduction
00:30 What is oss-fuzz
03:50 oss-fuzz github repo, projects, dockers files etc.
07:35 Understaning libtiff oss-fuzz build file and fuzzing harness
18:21 Configuring oss-fuzz on local system creating docker image and building fuzzers
25:16…

With CI Fuzz CLI, Java, developers can integrate fuzz tests into their unit testing setups (e.g. JUnit).

In this video, Josh demos how easy this can be done in Gradle.

For a deeper dive, check out our live stream: https://www.code-intelligence.com/webinar/beyond…