Fuzzing Labs

Fuzzing: The Age of Vulnerability Discovery - https://fuzzing.io/hushcon23.pdf

🔥1

1.22K views08:27

UNLEASH THE BEAST | THE FUTURE

Structure-Aware Fuzzing With AFL - https://devilinside.me/blogs/afl-structure-aware-fuzzing-protobuf-mutator

devilinside.me

Expect memes, food for thoughts, tech guidelines and trash talk daily.

👍3🔥1

1.31K views11:45

IPFS OSINT & Blockchain CTI: Exploring IPFS Data Collection & Analysis - https://youtu.be/Pp_3t2VV1W0

IPFS OSINT & Blockchain CTI: Exploring IPFS Data Collection & Analysis

📥 Slides available here: https://fuzzinglabs.com/wp-content/uploads/2023/10/Hacklu_CTISummit2023_IPFS_Unveiled_OSINT_CTI.pdf

This talk was given at hack.lu 2023, will dive into exclusive data collection and analysis techniques specific to this IPFS. We'll…

❤3

1.23K views14:52

tsffs: A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS - https://github.com/intel/tsffs

GitHub - intel/tsffs: A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS

A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS - intel/tsffs

❤2

1.27K views10:05

How to use vulhub - Dockerized Vulnerability Replication - https://www.youtube.com/watch?v=z0W3tfNQ-XQ

How to use vulhub - Dockerized Vulnerability Replication

🎥 Video Overview:
Welcome to fuzzing.in! In this tutorial, we dive into the world of cybersecurity and vulnerability replication using Vulhub, a powerful tool that provides a Dockerized environment for simulating a wide range of security issues.

00:00 Introduction…

❤3

1.46K views19:39

Lost in Translation: A Study of Bugs Introduced by Large Language...

Lost in Translation: A Study of Bugs Introduced by Large Language Models while Translating Code: paper - https://arxiv.org/abs/2308.03109, code - https://github.com/Intelligent-CAT-Lab/PLTranslationEmpirical

arXiv.org

Code translation aims to convert source code from one programming language (PL) to another. Given the promising abilities of large language models (LLMs) in code synthesis, researchers are...

❤3

1.72K views21:14

Fuzz Everything, Everywhere, All at Once: Advanced QEMU-based fuzzing - slides: https://fahrplan.events.ccc.de/congress/2023/fahrplan/system/event_attachments/attachments/000/004/435/original/aflplusplus-ccc-libafl_emu_%282%29.pdf / video: https://media.ccc.de/v/37c3-12102-fuzz_everything_everywhere_all_at_once

❤5🔥1

1.54K viewsedited 20:47

In this talk, we delve into the captivating realm of TCP/IP stack fuzzing. As the backbone of internet communication, the TCP/IP stack is...

Fuzzing the TCP/IP stack - video: https://media.ccc.de/v/37c3-12235-fuzzing_the_tcp_ip_stack

media.ccc.de

Fuzzing the TCP/IP stack

❤5😁3🔥1

1.8K views20:49

Apple video decoder fuzzing example - https://github.com/googleprojectzero/Jackalope/tree/main/examples/VideoToolbox

Jackalope/examples/VideoToolbox at main · googleprojectzero/Jackalope

Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android - googleprojectzero/Jackalope

🔥2❤1

1.61K views08:44

Finding The .webp Vulnerability in 8s (Fuzzing with AFL++) - https://www.youtube.com/watch?v=PJLWlmp8CDM

Finding The .webp Vulnerability in 8s (Fuzzing with AFL++)

A guide on how to do fuzzing with AFL++ in an attempt to rediscover the libwebp vulnerability CVE-2023-4863 that was used to hack iPhones.

Want to learn hacking? Signup to https://hextree.io (ad)
Buy my shitty font: https://shop.liveoverflow.com/ (ad)

Watch…

🤯4🔥3😁1

1.5K views16:56

SimpleNTSyscallFuzzer: Fuzzer for Windows kernel syscalls - https://github.com/waleedassar/SimpleNTSyscallFuzzer

GitHub - waleedassar/SimpleNTSyscallFuzzer

Contribute to waleedassar/SimpleNTSyscallFuzzer development by creating an account on GitHub.

👍2🔥1

1.52K views13:39

Underutilized Fuzzing Strategies for Modern Software Testing - https://www.youtube.com/watch?v=fMzeIv4U4LI

Underutilized Fuzzing Strategies for Modern Software Testing

Trail of Bits hosted one of LibAFL's maintainers and CISPA PhD candidate, Addison Crump, for our weekly internal Lunch and Learn session. While fuzzing is commonly associated with memory corruption vulnerabilities, it also has great potential for invariant…

👍4❤1

1.58K views11:44

oss-fuzz-gen: LLM powered fuzzing via OSS-Fuzz - https://github.com/google/oss-fuzz-gen

GitHub - google/oss-fuzz-gen: LLM powered fuzzing via OSS-Fuzz.

LLM powered fuzzing via OSS-Fuzz. Contribute to google/oss-fuzz-gen development by creating an account on GitHub.

😁5👍1

1.82K views08:59

SoK: Prudent Evaluation Practices for Fuzzing - https://mschloegel.me/paper/schloegel2024sokfuzzevals.pdf

👍3🔥2😁1

1.48K views17:24

Lucid: An educational Bochs-based snapshot fuzzer project - https://github.com/h0mbre/Lucid

GitHub - h0mbre/Lucid: An educational Bochs-based snapshot fuzzer project

An educational Bochs-based snapshot fuzzer project - h0mbre/Lucid

😁3👍2

1.44K views17:09

KernelGPT: Enhanced Kernel Fuzzing via Large Language Models - https://arxiv.org/pdf/2401.00563.pdf

👍3

1.49K views21:43

The Human Machine Interface

Fuzzer Development: Sandboxing Syscalls - https://h0mbre.github.io/Lucid_Context_Switching/#

Fuzzer Development 2: Sandboxing Syscalls

Introduction If you haven’t heard, we’re developing a fuzzer on the blog these days. I don’t even know if “fuzzer” is the right word for what we’re building, it’s almost more like an execution engine that will expose hooks? Anyways, if you missed the first…

👍2

1.63K views21:45