Posted by Oliver Chang, Dongge Liu and Jonathan Metzman, Google Open Source Security Team Recently, OSS-Fuzz reported 26 new vulnerabilities...

Posted by Ivan Fratric, Google Project Zero Recently, one of the projects I was involved in had to do with video decoding on Apple pla...

Discover how fuzzing can identify critical vulnerabilities in native Android components, strengthening device security.

Our security analysis of the Mongoose Web Server Library’s TLS implementation identified 10 significant vulnerabilities.

Fuzzing is the art of uncovering vulnerabilities through rapid target re-executions and intelligent input mutations.

In this talk, we'll dive deep into LibAFL, the state-of-the-art fuzzing library by the AFLplusplus project, and explore its more advanced…

In this post, I’ll walk you through the vulnerabilities I uncovered in the GStreamer library and how I built a custom fuzzing generator to target MP4 files.

Contribute to nedwill/presentations development by creating an account on GitHub.

Live streaming from the 38th Chaos Communication Congress

This repository contains the public work I produced, wheter it is research, post, slides, sometimes videos, and materials of my talks. - 20urc3/Publications

The Fall 2024 iteration of Fuzzing Lab where we fuzzed open-source software to find vulnerabilities!

A heap-based use-after-free vulnerability in wolfSSL was discovered through AI-automated fuzz testing—without human interaction. Learn more in our blog

As IoT devices with microcontroller (MCU)-based firmware become more common in our lives, memory corruption vulnerabilities in their firmware are increasingly targeted by adversaries. Fuzzing is a powerful method for detecting these vulnerabilities, but it…

Learn how to build effective harnesses for fuzzing native libraries on Android. Explore techniques and strategies to uncover vulnerabilities

asnfuzzgen - ASN.1 Structure-Aware Fuzzing Compiler - FICS/asnfuzzgen

Intro