Discover how fuzzing can identify critical vulnerabilities in native Android components, strengthening device security.

Our security analysis of the Mongoose Web Server Library’s TLS implementation identified 10 significant vulnerabilities.

Fuzzing is the art of uncovering vulnerabilities through rapid target re-executions and intelligent input mutations.

In this talk, we'll dive deep into LibAFL, the state-of-the-art fuzzing library by the AFLplusplus project, and explore its more advanced…

In this post, I’ll walk you through the vulnerabilities I uncovered in the GStreamer library and how I built a custom fuzzing generator to target MP4 files.

Contribute to nedwill/presentations development by creating an account on GitHub.

Live streaming from the 38th Chaos Communication Congress

This repository contains the public work I produced, wheter it is research, post, slides, sometimes videos, and materials of my talks. - 20urc3/Publications

The Fall 2024 iteration of Fuzzing Lab where we fuzzed open-source software to find vulnerabilities!

A heap-based use-after-free vulnerability in wolfSSL was discovered through AI-automated fuzz testing—without human interaction. Learn more in our blog

As IoT devices with microcontroller (MCU)-based firmware become more common in our lives, memory corruption vulnerabilities in their firmware are increasingly targeted by adversaries. Fuzzing is a powerful method for detecting these vulnerabilities, but it…

Learn how to build effective harnesses for fuzzing native libraries on Android. Explore techniques and strategies to uncover vulnerabilities

asnfuzzgen - ASN.1 Structure-Aware Fuzzing Compiler - FICS/asnfuzzgen

Intro

BINSEC: ICSE'25: research paper

Despite wolfSSL’s rigorous software testing practices, in October 2024, Code Intelligence—an application security vendor—discovered a potentially exploitable defect in wolfSSL. Remarkably, the potential vulnerability was found without human intervention.…

LibAFL # The LibAFL fuzzer implements features from AFL-based fuzzers like AFL++. Similarly to AFL++, LibAFL provides better fuzzing performance and more advanced features over libFuzzer. However, with LibAFL, all functionality is provided in a modular and…

Contribute to ANSSI-FR/fuzzysully development by creating an account on GitHub.

Snapshot fuzzing enables security engineers to effectively test software that is traditionally difficult to analyze, such as kernel-level software (though the technique is not limited to such software). Whether you’re auditing drivers or other kernel-mode…