Latest posts
Fuzzing Labs
30 Sept 2025, 15:00
https://x.com/FuzzingLabs/status/1973021408398561291X (formerly Twitter)FuzzingLabs (@FuzzingLabs) on X🚀 We're excited to announce the release of FuzzForge Open Source (OSS)! FuzzForge is our open-source platform designed to automate offensive security workflows & AI Agents, from static analysi…Fuzzing Labs
15 Jun 2025, 20:48
https://lolcads.github.io/posts/2025/05/high_performance_network_fuzzing/lolcads tech blogHow to build a high-performance network fuzzer with LibAFL and libdesockWe explain how we built a fuzzer for network applications that we tried to make as efficient and as effective as possible. We utilized custom mutators and input passing over shared memory and found that it gave us a huge speed and coverage boost compared…Fuzzing Labs
29 May 2025, 15:49
Oracle-guided C Fuzzing Harness Generation! - https://futures.cs.utah.edu/papers/25ICSE-b.pdf / https://futures.cs.utah.edu/papers/25ICSE-b_slides.pdf / https://github.com/FuturesLab/OGHarnFuzzing Labs
28 May 2025, 21:31
https://blog.oss-fuzz.com/posts/oss-fuzz-integrations-via-agent-based-build-generation/OSS-Fuzz blogOSS-Fuzz integrations via agent-based build generationOSS-Fuzz integrations via agent-based build generation.Fuzzing Labs
25 May 2025, 14:43
https://labs.infoguard.ch/posts/attacking_edr_part4_fuzzing_defender_scanning_and_emulation_engine/InfoGuard LabsAttacking EDRs Part 4: Fuzzing Defender's Scanning and Emulation Engine (mpengine.dll) - InfoGuard LabsMultiple out-of-bounds read and null dereference bugs were identified in Microsoft Defender by using Snapshot Fuzzing with WTF and kAFL/NYX. The bugs can be used to crash the main Defender process as soon as the file is scanned. Most are unpatched, but none…Fuzzing Labs
10 May 2025, 14:17
https://googleprojectzero.blogspot.com/2025/05/breaking-sound-barrier-part-i-fuzzing.htmlprojectzero.googleBreaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach MessagesGuest post by Dillon Franke, Senior Security Engineer, 20% time on Project Zero Every seco...Fuzzing Labs
9 May 2025, 08:57
https://tweedegolf.nl/en/blog/154/what-is-my-fuzzer-doingtweedegolf.nlWhat is my fuzzer doing? - Blog - Tweede golfFuzz testing is incredibly useful: it has caught many a bug during the development of NTP packet parsing and gzip/bzip2 (de)compression. But I've always been unsatisfied with the fuzzer being a b ...Fuzzing Labs
17 Apr 2025, 21:35
RE//verse 2025: Rethinking Emulation for Fu(zzi)n(g) (Lukas Seidel) - https://www.youtube.com/watch?v=o_ckTnTQlfsYouTubeRE//verse 2025: Rethinking Emulation for Fu(zzi)n(g) (Lukas Seidel)Full title: Rethinking Emulation for Fu(zzi)n(g) and Profit: Near-Native Rehosting for Embedded ARM Firmware Slides: https://github.com/binarly-io/Research_Publications/blob/main/REverse_2025/Near-Native%20Rehosting%20for%20Embedded%20ARM%20Firmware.pdf …Fuzzing Labs
17 Apr 2025, 20:37
OGHarn: Oracle-guided Fuzzing Harness Generation - https://github.com/FuturesLab/OGHarn / https://futures.cs.utah.edu/papers/25ICSE-b.pdfGitHubGitHub - FuturesLab/OGHarn: OGHarn: Oracle-guided Fuzzing Harness GenerationOGHarn: Oracle-guided Fuzzing Harness Generation. Contribute to FuturesLab/OGHarn development by creating an account on GitHub.Fuzzing Labs
9 Apr 2025, 14:17
https://appsec.guide/docs/fuzzing/snapshot-fuzzing/Testing HandbookSnapshot FuzzingSnapshot fuzzing enables security engineers to effectively test software that is traditionally difficult to analyze, such as kernel-level software (though the technique is not limited to such software). Whether you’re auditing drivers or other kernel-mode…Fuzzing Labs
21 Mar 2025, 21:10
https://github.com/ANSSI-FR/fuzzysully - Fuzzowski-based OPCUA fuzzerGitHubGitHub - ANSSI-FR/fuzzysully: Specialized testing tool designed to identify vulnerabilities and bugs in OPC UA (Open Platform Communications…Specialized testing tool designed to identify vulnerabilities and bugs in OPC UA (Open Platform Communications Unified Architecture) implementations - ANSSI-FR/fuzzysullyFuzzing Labs
18 Mar 2025, 21:41
Testing Handbook - LibAFL - https://appsec.guide/docs/fuzzing/c-cpp/libafl/Testing HandbookLibAFLLibAFL # The LibAFL fuzzer implements features from AFL-based fuzzers like AFL++. Similarly to AFL++, LibAFL provides better fuzzing performance and more advanced features over libFuzzer. However, with LibAFL, all functionality is provided in a modular and…Fuzzing Labs
8 Mar 2025, 15:35
Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies - https://www.onarlioglu.com/publications/raid2024gudifu.pdfFuzzing Labs
4 Mar 2025, 08:55
How AI-Automated Fuzzing Uncovered a Vulnerability in wolfSSL - https://www.youtube.com/watch?v=sBG6a2fGFfQYouTubeHow AI-Automated Fuzzing Uncovered a Vulnerability in wolfSSLDespite wolfSSL’s rigorous software testing practices, in October 2024, Code Intelligence—an application security vendor—discovered a potentially exploitable defect in wolfSSL. Remarkably, the potential vulnerability was found without human intervention.…Fuzzing Labs
18 Feb 2025, 13:10
https://adalogics.com/blog/minimal-llm-based-fuzz-harness-generatorFuzzing Labs
16 Feb 2025, 10:43
ROSA: Finding Backdoors with Fuzzing - https://binsec.github.io/nutshells/icse-25.htmlbinsec.github.ioICSE'25: research paperBINSEC: ICSE'25: research paperFuzzing Labs
4 Feb 2025, 13:03
Fuzzing embedded systems - Part 2, Writing a fuzzer with LibAFL - https://blog.sparrrgh.me//fuzzing/embedded/2025/01/26/fuzzing-embedded-systems-2.htmlSparrrgh’s blogFuzzing embedded systems - Part 2, Writing a fuzzer with LibAFLBlog by Sparrrgh on security research and hacking.Fuzzing Labs
25 Jan 2025, 10:02
asnfuzzgen - ASN.1 Structure-Aware Fuzzing Compiler - https://github.com/FICS/asnfuzzgenGitHubGitHub - FICS/asnfuzzgen: asnfuzzgen - ASN.1 Structure-Aware Fuzzing Compilerasnfuzzgen - ASN.1 Structure-Aware Fuzzing Compiler - FICS/asnfuzzgenFuzzing Labs
25 Jan 2025, 09:05
Introduction to Fuzzing Android Native Components: Strategies for Harness Creation - https://blog.convisoappsec.com/en/introduction-to-fuzzing-android-native-components-strategies-for-harness-creation/Conviso AppSecIntroduction to Fuzzing Android Native Components: Strategies for Harness CreationLearn how to build effective harnesses for fuzzing native libraries on Android. Explore techniques and strategies to uncover vulnerabilitiesFuzzing Labs
19 Jan 2025, 20:35
IoT Firmware Emulation and Its Security Application in Fuzzing: A Critical Revisit - https://www.mdpi.com/1999-5903/17/1/19MDPIIoT Firmware Emulation and Its Security Application in Fuzzing: A Critical RevisitAs IoT devices with microcontroller (MCU)-based firmware become more common in our lives, memory corruption vulnerabilities in their firmware are increasingly targeted by adversaries. Fuzzing is a powerful method for detecting these vulnerabilities, but it…
Related Channels
Other channels in the same section of the catalogue.
