Fuzzing Host-to-Guest Attack Surface in Android Protected KVM
Explore Android 13's Protected KVM security, focusing on guest device drivers' vulnerabilities. Learn about a fuzzing solution using Linux Kernel Library to identify and mitigate potential attack vectors.
Fuzzing Frontiers - Exploring Unknown Vulnerabilities with Nuclei v3.2
Explore Nuclei v3.2's advanced fuzzing capabilities for uncovering unknown vulnerabilities. Learn to craft custom templates and import HTTP traffic, enhancing your security testing workflow and threat mitigation strategies.
Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS
Explore macOS IPC security, focusing on Mach message handlers. Learn about custom fuzzing techniques to uncover vulnerabilities in privileged RPC-like functions, potentially leading to sandbox escapes and privilege escalations.
Introduction to Fuzzing Using FFUF
Learn to use ffuf for efficient web application fuzzing, enhancing your bug bounty and penetration testing skills.
Fuzz Faster with Turbo Intruder - Account Bruteforcing and MFA Bypass
Learn to use Turbo Intruder for efficient fuzzing, including account bruteforcing and bypassing MFA timers. Hands-on lab exercises demonstrate practical application of this powerful security testing tool.
ChatGPT Examples for Programming, InfoSec, and Fuzzing
Explore ChatGPT's versatility in programming, security, and daily tasks. Learn to create fuzzers, analyze code, find vulnerabilities, and leverage AI for various applications.
Replicating OpenSSL Vulnerabilities CVE-2022-3602 and CVE-2022-3786 - How-to Guide
Replicate OpenSSL vulnerabilities CVE-2022-3602 and CVE-2022-3786 using provided test cases. Learn to exploit, test, and confirm these vulnerabilities in specific OpenSSL versions.
Don't Panic: Common Blockchain Bugs and How to Find Them
Explore common blockchain bugs, their impact, and testing techniques. Learn about a new fuzzer for Substrate-based chains and see live demonstrations of typical vulnerabilities.
Neutaint- Efficient Dynamic Taint Analysis with Neural Networks
Explore efficient dynamic taint analysis using neural networks, overcoming limitations of traditional methods and improving performance in exploit analysis and fuzzing.
Grammatical Inference and Language Frameworks for LANGSEC
Explore grammatical inference and language frameworks for enhancing security protocols and parsers. Learn about pattern languages, formal systems, and their applications in HTTP session analysis.
Hardening Linux for Confidential Cloud Computing - Deep Dive and Results
Explore techniques for hardening Linux guest systems in confidential cloud computing environments, focusing on security mechanisms, kernel subsystem treatments, and results from fuzzing and code audits.
Fully Verified Open Silicon - Challenges and Solutions in OpenTitan
Explore OpenTitan's comprehensive verification process for open-source silicon, from chip-level simulations to block-level tests, addressing unique hardware challenges and industry expectations.
Syzbot and the Tale of Thousand Kernel Bugs
Explore Linux kernel bug detection tools and their impact on system security. Learn about syzbot, syzkaller, and sanitizers for improving kernel stability and reliability.
Bugs in Blocks: Common Vulnerabilities in Blockchain Frameworks
Exploring common blockchain vulnerabilities, their impacts, and testing methods. Includes a demo of a fuzzer for Substrate-based chains to find typical bugs in blockchain systems.
Firefox: How to Ship Quality Software - 8000 Patches Every 6 Weeks
Discover Mozilla's strategies for maintaining Firefox's quality with rapid releases, extensive testing, and innovative tools for efficient software development.
Dealing with Uninitialized Memory in the Linux Kernel
Explore KMSAN's detection of uninitialized memory bugs in the Linux kernel, their security implications, and potential solutions through heap and stack initialization techniques.
High-Assurance Go Cryptography - Ensuring Safety in Cryptographic Libraries
Explore techniques for ensuring safety and reliability in Go's cryptography standard library, including testing, fuzzing, and formal proofs.
Breaking Theoretical Limits - The Gap Between Virtual NICs and Physical Network Cards
Explore vulnerabilities in virtual NICs by breaking IP packet length limits, comparing with physical network cards, and uncovering security gaps in Hyper-V's network modules.
How I Found 16 Microsoft Office Excel Vulnerabilities in 6 Months
Discover the process of finding 16 Microsoft Excel vulnerabilities through fuzzing, including corpus selection, mutation algorithms, and result management techniques.
Software Security Analysis - Present and Future Research Initiatives
Explore software security analysis, covering vulnerability detection, attack mitigation, and automated exploit generation. Learn about cutting-edge research initiatives in program comprehension and security testing techniques.
Fuzzing RDP Client and Server
Exploring innovative techniques to fuzz RDP protocol using WinAFL, uncovering vulnerabilities in both client and server implementations for enhanced remote connection security.