This time, I’ll discuss why this approach is more challenging than simply substituting a socket file descriptor with a typical file descriptor.

This is the final post in the three-part series that details techniques I used to fuzz two µC/OS protocol stacks: µC/TCP-IP and µC/HTTP-server.

Talk by Dillon Franke - June 26th, 2024 at TROOPERS24 IT security conference in Heidelberg, Germany hosted by @ERNW_ITSec

#TROOPERS24 #ITsecurity
https://troopers.de/troopers24/talks/lb9pjt

More impressions:
https://twitter.com/WEareTROOPERS
https://t…

Introducing LLM-based harness generation for Java OSS-Fuzz projects.

A coverage-guided REST API fuzzer developed on top of LibAFL - TNO-S3/WuppieFuzz

Core emulator components for Icicle. Contribute to icicle-emu/icicle-emu development by creating an account on GitHub.

AddressSanitizer (ASan) is a compiler plugin that helps detect memory errors like buffer overflows or use-after-frees. In this post, we explain how to equip your C++ code with ASan annotations to find more bugs. We also show our work on ASan in GCC and LLVM.…

Reasons for the unreasonable success of fuzzing Does ML’s “bitter lesson” apply to bug discovery?

FUZZING'24 Keynote: "Is 'AI' useful for fuzzing?" by Brendan Dolan-Gavitt

Abstract: Discussion of AI and its applications to security seems unavoidable nowadays, and, alas, this keynote is no exception. But is it actually useful for problems we care about…

FUZZING'24 Keynote: "Reasons for the Unreasonable Success of Fuzzing" by Thomas Dullien

Abstract: The hacker culture of my youth (90s) was a very typical male-centric teenage subculture, with norms and value systems that were at odds with broader society.…

Keynote: Securing the Software Commons: Standards, Automation, and AI for a Resilient Open Source Future - Abhishek Arya, Principal Engineer, Google Open Source and Supply Chain Security, Google

Open source software forms a critical component of our modern…

This video is a short introduction on how to use OSS-Fuzz-gen to generate fuzzing harnesses.

Posted by Xuan Xing, Eugene Rodionov, Jon Bottarini, Adam Bacchus - Android Red Team;
Amit Chaudhary, Lyndon Fawcett, Joseph Artgole - ...