Automating API Penetration Testing Using Fuzzapi
Explore automated API penetration testing with fuzzapi, addressing common vulnerabilities in REST APIs. Learn to integrate security testing into development pipelines for early detection and mitigation.
Bugs Ruin Everything - Keynote on Vulnerability Analysis and Exploitation
Explore vulnerability analysis techniques, their strengths and weaknesses, and real-world case studies with security expert Charlie Miller in this engaging keynote from AppSecEU 2016.
The API Assessment Primer
Learn essential API security assessment techniques, including key considerations, testing steps, and best practices for protecting APIs and mobile applications from common vulnerabilities and threats.
Verifying Software for Security Bugs - Dynamic Analysis and Fuzzing Testing
Learn dynamic analysis and fuzzing techniques to verify software security, including mitigations and vulnerability checks. Explore BinSecSweeper, an open-source tool for binary analysis on Windows and Linux.
Rust-VMM: A Security Journey
Explore rust-vmm's security journey, covering components, audits, development practices, and fuzzing techniques for virtualization and Virtio components.
Making Fuzzing Part of Your Software Development Lifecycle
Learn to integrate fuzzing into software development, exploring tools like libFuzzer, ClusterFuzz, and OSS-Fuzz to enhance security and catch bugs early in open-source and proprietary projects.
Code Aware Services for Vulnerability Detection - Welcome Back and Remarks
Explore Code Aware Services for complex software security. Learn about build tracing, source code processing, and tools for vulnerability detection in large-scale projects like Android Linux kernel.
Hacking for Developers
Learn ethical hacking techniques, tools, and methodologies to enhance your development skills and improve software security. Gain insights into vulnerability assessment and exploitation.
Analyzing Cellular Basebands with FirmWire
Explore FirmWire, an open-source platform for analyzing cellular basebands. Learn about baseband vulnerabilities, emulation techniques, and how to uncover security flaws in LTE and GSM stacks.
Inside Apple's Lightning: JTAGging the iPhone for Fuzzing and Profit
Explore Apple's Lightning protocol, learn iPhone JTAGging techniques, and discover fuzzing methods for potential vulnerabilities and profit.
Exploit Engineering: Attacking the Linux Kernel
Explore Linux kernel exploitation techniques, from attack surface mapping to vulnerability discovery and exploit development. Gain insights into advanced kernel exploitation methods and tools.
Changing and Unchanged Things in Vulnerability Research
Explore vulnerability research evolution, from buffer overflows to advanced fuzzing and exploit mitigations. Analyze case studies and future trends in offensive and defensive security strategies.
Fuzzing the TCP/IP Stack - Beyond the Trivial
Explore advanced TCP/IP stack fuzzing techniques, focusing on innovative approaches like state fuzzing with PicoTCP. Learn about uncovering vulnerabilities and enhancing network security beyond traditional methods.
The Hunt for CVE-2023-0286 - Replicating OpenSSL's Latest Vulnerability
Replicate CVE-2023-0286 in OpenSSL, learn to write a libfuzzer harness, and explore vulnerability research techniques for enhanced security awareness and threat prevention.
BOLABuster: Harnessing LLMs for Automating BOLA Detection
Harnessing LLMs to automate BOLA detection in APIs and web applications, reducing requests by 99% while uncovering critical vulnerabilities and submitting multiple CVEs.
Blasting Past WebP - Exploring Image Format Vulnerabilities
Explore advanced techniques for bypassing WebP image format security measures, uncovering vulnerabilities and potential exploits in web applications.
Security Posture Assessment and Improvements for Open Source Projects
Explore essential security practices for open source projects, including fuzzing, SBOM, and SSDLC. Learn to assess vulnerabilities and maintain robust security postures through real-world examples.
How to Randomly Test Programs and Why Random Tests Are Good
Discover effective random testing techniques for distributed systems, exploring combinatorial insights, probabilistic methods, and fuzzing strategies for ensuring program reliability.
Fuzzing Like a Security Engineer - ETHTaipei 2023
Master advanced fuzzing techniques and security engineering practices to identify vulnerabilities and strengthen code security through hands-on demonstrations and expert guidance.
LLMs at the Forefront - Pioneering the Future of Fuzz Testing
Explore how Large Language Models revolutionize fuzz testing in cybersecurity, featuring FuzzForest tool demonstrations and practical applications for automated security assessments.
IJON: Exploring Deep State Spaces via Fuzzing
Explore advanced fuzzing techniques for deep state spaces, covering high-level mutation, feedback mechanisms, and practical applications in software testing and security.