NEW BOT Телеграм, страница

Fuzzing

Extracting a 19 Year Old Code Execution from WinRAR https://research.checkpoint.com/extracting-code-execution-from-winrar/ #expdev #afl #fuzzing

Check Point Research

Extracting a 19 Year Old Code Execution from WinRAR - Check Point Research

Research by: Nadav Grossman Introduction In this article, we tell the story of how we found a logical bug using the WinAFL fuzzer and exploited it in WinRAR to gain full control over a victim’s computer. The exploit works by just extracting an archive, and…

223 views11:20

Fuzzing

This post will explain the process of finding and exploiting a previously unknown vulnerability in a real-world piece of software to achieve code execution. The vulnerability was initially found in 2016 and the vendor was contacted however no response was ever received. Now several years later (March 2019 at time of writing), the vulnerability still exists in the latest version.

https://medium.com/@DanielC7/introduction-to-file-format-fuzzing-exploitation-922143ab2ab3

Medium

Introduction to File Format Fuzzing & Exploitation

This post will explain the process of finding and exploiting a previously unknown vulnerability in a real-world piece of software to…

270 views11:20

Fuzzing

Fuzzing Adobe Reader for exploitable vulns using AFL
https://kciredor.com/fuzzing-adobe-reader-for-exploitable-vulns-fun-not-profit.html #fuzzing

kciredor’s engineering and security blog

Fuzzing Adobe Reader for exploitable vulns (fun != profit)

Binaries vs websites It has been half a year since my last blog post covering an IDOR in a website API. About time to write about something new and hopefully interesting! Having switched my focus from websites to binaries a new world opened up to me.

287 views11:20

Fuzzing

A great post on setting up fuzzing for a WebRTC server.

https://webrtchacks.com/fuzzing-janus/

webrtcHacks

How Janus Battled libFuzzer and Won (Alessandro Toppi) - webrtcHacks

In depth walkthrough of how to use libFuzzer and OSS-Fuzz for fuzz testing a RTCP parser using the WebRTC server, Janus as an example.

422 views11:20

Fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

https://github.com/secfigo/Awesome-Fuzzing

GitHub

GitHub - secfigo/Awesome-Fuzzing: A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials…

450 viewsedited 11:20

Fuzzing

Modular And Compositional analysis with KLEE Engine https://github.com/tum-i22/macke #klee #symbolic #fuzzing

GitHub

GitHub - tum-i4/macke: Modular And Compositional analysis with KLEE Engine

Modular And Compositional analysis with KLEE Engine - tum-i4/macke

395 views11:20

Fuzzing

fuzzilli - a JavaScript Engine Fuzzer https://github.com/googleprojectzero/fuzzilli #fuzzing

GitHub

GitHub - googleprojectzero/fuzzilli: A JavaScript Engine Fuzzer

A JavaScript Engine Fuzzer. Contribute to googleprojectzero/fuzzilli development by creating an account on GitHub.

349 views11:20

Fuzzing

Fuzzing pinned «A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis. https://github.com/secfigo/Awesome…»

11:21

Fuzzing

Fuzzing the Kernel using AFL Unicorn https://github.com/fgsect/unicorefuzz

GitHub

GitHub - fgsect/unicorefuzz: Fuzzing the Kernel Using Unicornafl and AFL++

Fuzzing the Kernel Using Unicornafl and AFL++. Contribute to fgsect/unicorefuzz development by creating an account on GitHub.

305 views08:51

Fuzzing

A fuzzer framework built in Rust https://github.com/microsoft/lain

GitHub

GitHub - microsoft/lain: A fuzzer framework built in Rust

A fuzzer framework built in Rust. Contribute to microsoft/lain development by creating an account on GitHub.