NEW BOT Телеграм, страница - 533401492

Fuzzing

529 subscribers

2 photos

1 file

105 links

Join our chat:
https://news.1rj.ru/str/offensive_binary

Download Telegram

About

Blog

Apps

Platform

529 subscribers

[CVE49] Microsoft Windows LNK Remote Code Execution Vulnerability - CVE-2020-1299

https://blog.vincss.net/2020/06/cve49-microsoft-windows-lnk-remote-code-execution-vuln-cve-2020-1299-eng.html

609 views08:00

https://winternl.com/fuzzing-the-windows-api-for-av-evasion/

565 views15:36

https://gamozolabs.github.io/2020/07/12/fuzz_week_2020.html

Gamozo Labs Blog

592 views11:28

FuZZan: Efficient Sanitizer Metadata Design for Fuzzing

Source: https://github.com/HexHive/FuZZan
Article: http://hexhive.epfl.ch/publications/files/20ATC.pdf

GitHub - HexHive/FuZZan: FuZZan: Efficient Sanitizer Metadata Design for Fuzzing

FuZZan: Efficient Sanitizer Metadata Design for Fuzzing - HexHive/FuZZan

556 views15:41

MMS Exploit Part 1: Introduction to the Samsung Qmage Codec and Remote Attack Surface

https://googleprojectzero.blogspot.com/2020/07/mms-exploit-part-1-introduction-to-qmage.html

MMS Exploit Part 1: Introduction to the Samsung Qmage Codec and Remote Attack Surface

Posted by Mateusz Jurczyk, Project Zero This post is the first of a multi-part series capturing my journey from discovering a vulnerable...

596 views05:00

https://www.kitploit.com/2020/09/fluffi-fully-localized-utility-for.html

KitPloit - PenTest & Hacking Tools

FLUFFI (Fully Localized Utility For Fuzzing Instantaneously) - A Distributed Evolutionary Binary Fuzzer For Pentesters

486 views20:33

https://blog.trailofbits.com/2020/10/22/lets-build-a-high-performance-fuzzer-with-gpus/

The Trail of Bits Blog

Let’s build a high-performance fuzzer with GPUs!

TL;DR: Can we use GPUs to get 10x performance/dollar when fuzzing embedded software in the cloud? Based on our preliminary work, we think the answer is yes! Fuzzing is a software testing technique that supplies programs with many randomized inputs in an attempt…

697 views13:42

https://gamozolabs.github.io/2020/10/23/some_thoughts_on_gpu_fuzzing.html

Gamozo Labs Blog

Some thoughts on ToB’s GPU-based fuzzing

524 views16:54

https://ics-cert.kaspersky.com/reports/2020/10/19/practical-example-of-fuzzing-opc-ua-applications/

Kaspersky ICS CERT | Kaspersky Industrial Control Systems Cyber Emergency Response Team

Practical example of fuzzing OPC UA applications | Kaspersky ICS CERT

We continue to describe our approaches to searching for vulnerabilities in industrial systems based on the OPC UA protocol. In this article, we examine new techniques that can be used to search for memory corruption vulnerabilities if the source code is available.…

926 views12:37

Fuzzing playlist
https://www.youtube.com/playlist?list=PLHGgqcJIME5kYhOSdJjvtVS4b4_OXDqM-

This playlist contains lots of fuzzing video tutorials on various fuzzers. don't forget to like, subscribe and share my channel. #AFL #AFLplusplus #libafl #h...

687 viewsedited 09:02

https://blog.jmpesp.org/2020/01/fuzzing-php-with-domato.html

blog.jmpesp.org

Fuzzing PHP with Domato

For clarity and brevity, the code referenced below has been distilled to simplest form. The complete versions which were actually used for...

15.9K views11:01

Linux on RISC-V (RV Summit 2020).pdf

”Linux on RISC-V” by Drew Fustini

https://docs.google.com/presentation/d/1mD-yPd-zB-DNXVTTNWGd22EZuSi9_4hcJGHYzrDQLjU/edit#slide=id.ga1453b7d9f_0_102

●Recent work for debug, trace and security

○eBPF JIT for RV64 and RV32
○kprobes and kretprobes
○kexec and kdump
○syszcaller fuzzing

524 views11:13

JavaScript Engine Fuzzing and Exploitation Reading List

https://zon8.re/posts/javanoscript-engine-fuzzing-and-exploitation-reading-list/

JavaScript Engine Fuzzing and Exploitation Reading List [Updated 2022]

Regularly updated reading list for core concepts required to exploit browsers

632 views10:58

UAFuzz - Binary-level Directed Fuzzing For Use-After-Free Vulnerabilities

https://www.kitploit.com/2020/11/uafuzz-binary-level-directed-fuzzing.html

KitPloit - PenTest & Hacking Tools

UAFuzz - Binary-level Directed Fuzzing For Use-After-Free Vulnerabilities

610 views06:36

A Python3 Module To Assist In Fuzzing Web Applications

https://www.kitploit.com/2020/11/py3webfuzz-python3-module-to-assist-in.html

KitPloit - PenTest & Hacking Tools

Py3Webfuzz - A Python3 Module To Assist In Fuzzing Web Applications

637 viewsedited 10:29

Academic papers related to fuzzing, binary analysis, and exploit dev

https://github.com/0xricksanchez/paper_collection

GitHub - 0xricksanchez/paper_collection: Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to…

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read - 0xricksanchez/paper_collection

520 views17:14

https://gmgn.medium.com/rest-api-fuzzing-with-microsoft-restler-7184053e2205?source=rss-------8-----------------programming

REST API Fuzzing with Microsoft RESTLer

Fresh from Microsoft Research, the RESTLer fuzzer is a new REST fuzzing tool, it relies on a OpenAPI/Swagger specification to create and…

637 views05:34

http://internal-www.fireeye.com/blog/threat-research/2020/09/fuzzing-image-parsing-in-windows-color-profiles.html

454 views08:15

https://github.com/microsoft/onefuzz

GitHub - microsoft/onefuzz: A self-hosted Fuzzing-As-A-Service platform

A self-hosted Fuzzing-As-A-Service platform. Contribute to microsoft/onefuzz development by creating an account on GitHub.

494 views11:17

Tool review: Wfuzz (web application fuzzer)

https://linuxsecurity.expert/tools/wfuzz/

Linux Security Expert

Wfuzz review (web application fuzzer)

Wfuzz is a security tool to do fuzzing of web applications. It is modular and can be used to discover and exploit web application vulnerabilities. This makes the tool useful for both developers as security professionals.

463 views09:56

RESTler finds security and reliability bugs through automated fuzzing

https://www.microsoft.com/en-us/research/blog/restler-finds-security-and-reliability-bugs-through-automated-fuzzing/

Microsoft Research

RESTler finds security and reliability bugs through automated fuzzing - Microsoft Research

Microsoft researchers open source the first stateful REST API fuzzing tool designed to make cloud services more reliable and secure. Learn how RESTler automatically tests and finds security bugs through their REST APIs.

605 views04:48