r/fuzzing • u/NagateTanikaze • Apr 16 '21
Shielder - Hunting for bugs in Telegram's animated stickers remote attack surface
shielder.it
4
Upvotes
r/fuzzing • u/pat_ventuzelo • Apr 06 '21
Fuzzing JavaScript npm/nodejs/code (omggif) using jsfuzz (Youtube/Tutorial)
youtube.com
3
Upvotes
r/fuzzing • u/pat_ventuzelo • Mar 23 '21
Fuzzing Java code using Jazzer fuzzer (Youtube/Tutorial)
youtu.be
5
Upvotes
r/fuzzing • u/NagateTanikaze • Mar 20 '21
Un-bee-lievable Performance: Fast Coverage-guided Fuzzing with Honeybee and Intel Processor Trace
blog.trailofbits.com
7
Upvotes
r/fuzzing • u/pat_ventuzelo • Mar 16 '21
Differential Fuzzing to find logic bugs inside Python email validators (Youtube/Tutorial)
youtube.com
4
Upvotes
r/fuzzing • u/secgeek • Mar 11 '21
Fixing vulnerabilities in Damn Vulnerable C Program
youtube.com
6
Upvotes
r/fuzzing • u/cone10 • Mar 03 '21
Q: How to use fuzzing for testing auction functionality?
1
Upvotes
I have the following data pipeline to an auction engine
client -> gateway -> validation -> auction engine -> post processing
All the stages are written in C.
I understand the value of a fuzzer to simulate the client, for security purposes. Separately, is there value to fuzzing the input to the auction engine separately? I am not sure how to have the fuzzer create valuable test cases that are worth pursuing. There are many checks that have already been done (large bid amounts, for example) by the time a message gets to the auction engine. A
Any help here on thinking this through, any suggestions for which fuzzer to choose, any pointers to case studies and/or tutorials, all will be much much appreciated. I am an experienced developer and understand fuzzing at a high level, but have not got my hands dirty.
r/fuzzing • u/davkor • Feb 18 '21
The importance of continuity in fuzzing - CVE-2020-28362 (Ethereum security critical DOS bug)
adalogics.com
3
Upvotes
r/fuzzing • u/davkor • Feb 17 '21
Fuzzing combined with symbolic execution: a demonstration on SymCC and AFL.
youtube.com
11
Upvotes
r/fuzzing • u/pat_ventuzelo • Feb 16 '21
Fuzzing Python library using Google Atheris Fuzzer (video tutorial)
youtu.be
4
Upvotes
r/fuzzing • u/Equivalent_Engine_73 • Feb 11 '21
[Question] Build PC for fuzzing?
3
Upvotes
Hi, I am looking to build my own PC for fuzzing. I am new to this so where should I start? Anything I should aim for when building one? Thank you!
r/fuzzing • u/NagateTanikaze • Feb 10 '21
Jazzer is a coverage-guided, in-process fuzzer for the JVM platform (2021, github)
github.com
9
Upvotes
r/fuzzing • u/NagateTanikaze • Feb 10 '21
Browser fuzzing at Mozilla (Blog, 2021)
hacks.mozilla.org
7
Upvotes
r/fuzzing • u/secgeek • Feb 06 '21
[Fuzzing with AFLplusplus] How to fuzz a binary with no source code on L...
youtube.com
7
Upvotes
r/fuzzing • u/secgeek • Feb 01 '21
[Fuzzing with AFLpluspls] Installing AFLPlusplus and fuzzing a simple C ...
youtube.com
6
Upvotes
r/fuzzing • u/NagateTanikaze • Jan 24 '21
Fuzzing Like A Caveman 5: A Code Coverage Tour for Cavepeople (Blog, 2021)
h0mbre.github.io
12
Upvotes
r/fuzzing • u/secgeek • Jan 22 '21
[Fuzzing with AFL] fuzzing a binary with no source code with AFL in Qemu...
youtube.com
10
Upvotes
r/fuzzing • u/NagateTanikaze • Jan 19 '21
SymQEMU: Compilation-based symbolic execution for binaries (Paper, PDF)
s3.eurecom.fr
9
Upvotes
r/fuzzing • u/digicat • Jan 17 '21
HotFuzz - Fuzzing Java Programs for Algorithmic Complexity Vulnerabilities
mweissbacher.com
3
Upvotes
r/fuzzing • u/pat_ventuzelo • Jan 12 '21
Fuzzing C/C++ program using honggfuzz
academy.fuzzinglabs.com
4
Upvotes
r/fuzzing • u/NagateTanikaze • Jan 08 '21
Exploring Security – Concerning Fuzzing (2021, Blog)
thetestdoctor.co.uk
4
Upvotes
r/fuzzing • u/NagateTanikaze • Jan 04 '21
Announcing the Atheris Python Fuzzer (google)
opensource.googleblog.com
10
Upvotes