Последние посты
Fuzzing Labs
30 сент. 2025 г., 15:00
https://x.com/FuzzingLabs/status/1973021408398561291X (formerly Twitter)FuzzingLabs (@FuzzingLabs) on X🚀 We're excited to announce the release of FuzzForge Open Source (OSS)! FuzzForge is our open-source platform designed to automate offensive security workflows & AI Agents, from static analysi…Fuzzing Labs
15 июн. 2025 г., 20:48
https://lolcads.github.io/posts/2025/05/high_performance_network_fuzzing/lolcads tech blogHow to build a high-performance network fuzzer with LibAFL and libdesockWe explain how we built a fuzzer for network applications that we tried to make as efficient and as effective as possible. We utilized custom mutators and input passing over shared memory and found that it gave us a huge speed and coverage boost compared…Fuzzing Labs
29 мая 2025 г., 15:49
Oracle-guided C Fuzzing Harness Generation! - https://futures.cs.utah.edu/papers/25ICSE-b.pdf / https://futures.cs.utah.edu/papers/25ICSE-b_slides.pdf / https://github.com/FuturesLab/OGHarnFuzzing Labs
28 мая 2025 г., 21:31
https://blog.oss-fuzz.com/posts/oss-fuzz-integrations-via-agent-based-build-generation/OSS-Fuzz blogOSS-Fuzz integrations via agent-based build generationOSS-Fuzz integrations via agent-based build generation.Fuzzing Labs
25 мая 2025 г., 14:43
https://labs.infoguard.ch/posts/attacking_edr_part4_fuzzing_defender_scanning_and_emulation_engine/InfoGuard LabsAttacking EDRs Part 4: Fuzzing Defender's Scanning and Emulation Engine (mpengine.dll) - InfoGuard LabsMultiple out-of-bounds read and null dereference bugs were identified in Microsoft Defender by using Snapshot Fuzzing with WTF and kAFL/NYX. The bugs can be used to crash the main Defender process as soon as the file is scanned. Most are unpatched, but none…Fuzzing Labs
10 мая 2025 г., 14:17
https://googleprojectzero.blogspot.com/2025/05/breaking-sound-barrier-part-i-fuzzing.htmlprojectzero.googleBreaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach MessagesGuest post by Dillon Franke, Senior Security Engineer, 20% time on Project Zero Every seco...Fuzzing Labs
9 мая 2025 г., 08:57
https://tweedegolf.nl/en/blog/154/what-is-my-fuzzer-doingtweedegolf.nlWhat is my fuzzer doing? - Blog - Tweede golfFuzz testing is incredibly useful: it has caught many a bug during the development of NTP packet parsing and gzip/bzip2 (de)compression. But I've always been unsatisfied with the fuzzer being a b ...Fuzzing Labs
17 апр. 2025 г., 21:35
RE//verse 2025: Rethinking Emulation for Fu(zzi)n(g) (Lukas Seidel) - https://www.youtube.com/watch?v=o_ckTnTQlfsYouTubeRE//verse 2025: Rethinking Emulation for Fu(zzi)n(g) (Lukas Seidel)Full title: Rethinking Emulation for Fu(zzi)n(g) and Profit: Near-Native Rehosting for Embedded ARM Firmware Slides: https://github.com/binarly-io/Research_Publications/blob/main/REverse_2025/Near-Native%20Rehosting%20for%20Embedded%20ARM%20Firmware.pdf …Fuzzing Labs
17 апр. 2025 г., 20:37
OGHarn: Oracle-guided Fuzzing Harness Generation - https://github.com/FuturesLab/OGHarn / https://futures.cs.utah.edu/papers/25ICSE-b.pdfGitHubGitHub - FuturesLab/OGHarn: OGHarn: Oracle-guided Fuzzing Harness GenerationOGHarn: Oracle-guided Fuzzing Harness Generation. Contribute to FuturesLab/OGHarn development by creating an account on GitHub.Fuzzing Labs
9 апр. 2025 г., 14:17
https://appsec.guide/docs/fuzzing/snapshot-fuzzing/Testing HandbookSnapshot FuzzingSnapshot fuzzing enables security engineers to effectively test software that is traditionally difficult to analyze, such as kernel-level software (though the technique is not limited to such software). Whether you’re auditing drivers or other kernel-mode…Fuzzing Labs
21 мар. 2025 г., 21:10
https://github.com/ANSSI-FR/fuzzysully - Fuzzowski-based OPCUA fuzzerGitHubGitHub - ANSSI-FR/fuzzysully: Specialized testing tool designed to identify vulnerabilities and bugs in OPC UA (Open Platform Communications…Specialized testing tool designed to identify vulnerabilities and bugs in OPC UA (Open Platform Communications Unified Architecture) implementations - ANSSI-FR/fuzzysullyFuzzing Labs
18 мар. 2025 г., 21:41
Testing Handbook - LibAFL - https://appsec.guide/docs/fuzzing/c-cpp/libafl/Testing HandbookLibAFLLibAFL # The LibAFL fuzzer implements features from AFL-based fuzzers like AFL++. Similarly to AFL++, LibAFL provides better fuzzing performance and more advanced features over libFuzzer. However, with LibAFL, all functionality is provided in a modular and…Fuzzing Labs
8 мар. 2025 г., 15:35
Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies - https://www.onarlioglu.com/publications/raid2024gudifu.pdfFuzzing Labs
4 мар. 2025 г., 08:55
How AI-Automated Fuzzing Uncovered a Vulnerability in wolfSSL - https://www.youtube.com/watch?v=sBG6a2fGFfQYouTubeHow AI-Automated Fuzzing Uncovered a Vulnerability in wolfSSLDespite wolfSSL’s rigorous software testing practices, in October 2024, Code Intelligence—an application security vendor—discovered a potentially exploitable defect in wolfSSL. Remarkably, the potential vulnerability was found without human intervention.…Fuzzing Labs
18 февр. 2025 г., 13:10
https://adalogics.com/blog/minimal-llm-based-fuzz-harness-generatorFuzzing Labs
16 февр. 2025 г., 10:43
ROSA: Finding Backdoors with Fuzzing - https://binsec.github.io/nutshells/icse-25.htmlbinsec.github.ioICSE'25: research paperBINSEC: ICSE'25: research paperFuzzing Labs
4 февр. 2025 г., 13:03
Fuzzing embedded systems - Part 2, Writing a fuzzer with LibAFL - https://blog.sparrrgh.me//fuzzing/embedded/2025/01/26/fuzzing-embedded-systems-2.htmlSparrrgh’s blogFuzzing embedded systems - Part 2, Writing a fuzzer with LibAFLBlog by Sparrrgh on security research and hacking.Fuzzing Labs
25 янв. 2025 г., 10:02
asnfuzzgen - ASN.1 Structure-Aware Fuzzing Compiler - https://github.com/FICS/asnfuzzgenGitHubGitHub - FICS/asnfuzzgen: asnfuzzgen - ASN.1 Structure-Aware Fuzzing Compilerasnfuzzgen - ASN.1 Structure-Aware Fuzzing Compiler - FICS/asnfuzzgenFuzzing Labs
25 янв. 2025 г., 09:05
Introduction to Fuzzing Android Native Components: Strategies for Harness Creation - https://blog.convisoappsec.com/en/introduction-to-fuzzing-android-native-components-strategies-for-harness-creation/Conviso AppSecIntroduction to Fuzzing Android Native Components: Strategies for Harness CreationLearn how to build effective harnesses for fuzzing native libraries on Android. Explore techniques and strategies to uncover vulnerabilitiesFuzzing Labs
19 янв. 2025 г., 20:35
IoT Firmware Emulation and Its Security Application in Fuzzing: A Critical Revisit - https://www.mdpi.com/1999-5903/17/1/19MDPIIoT Firmware Emulation and Its Security Application in Fuzzing: A Critical RevisitAs IoT devices with microcontroller (MCU)-based firmware become more common in our lives, memory corruption vulnerabilities in their firmware are increasingly targeted by adversaries. Fuzzing is a powerful method for detecting these vulnerabilities, but it…
