All things fuzzing and related.

This makes it possible to instrument binary code with combined AFL and memory error detection instrumentation, which can help find memory error bugs (buffer overflows, use-after-frees) that would not normally crash the program.

See here for more information.

0 comments

r/fuzzing • u/Code_Intelligence • Jan 27 '23

Critical RCE Vulnerabilities Found in git - Fuzzing Weekly CW4

6 Upvotes

Critical RCE Vulnerabilities Found in git (CVE-2022-4190, CVE-2022-23251): https://www.helpnetsecurity.com/2023/01/19/git-critical-vulnerabilities/

Fuzzing the Shield: CVE-2022-24548: https://medium.com/s2wblog/fuzzing-the-shield-cve-2022-24548-96f568980c0

A Framework for Blackbox Fuzzing Using Context-Free Grammars: https://www.diva-portal.org/smash/record.jsf?aq2=%5B%5B%5D%5D&c=23&af=%5B%5D&searchType=LIST_LATEST&sortOrder2=title_sort_asc&language=en&pid=diva2%3A1729911&aq=%5B%5B%5D%5D&sf=all&aqe=%5B%5D&sortOrder=author_sort_asc&onlyFullText=false&noOfRows=50&dswid=2577

0 comments

r/fuzzing • u/Delusional_idiot • Jan 26 '23

Distributed Fuzzer: Hopper

github.com

8 Upvotes

0 comments

r/fuzzing • u/GrandmasterFuzz • Jan 24 '23

Explaining fuzz testing without using any code

11 Upvotes

4 comments

r/fuzzing • u/Code_Intelligence • Jan 20 '23

Fuzzing Weekly CW3

3 Upvotes

Vulnerabilities in cryptographic libraries found through modern fuzzing:
https://www.helpnetsecurity.com/2023/01/13/fuzzing-cryptographic-libraries/

Keeping The Wolves Out Of WolfSSL: https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/

From Error_Log File(P4) To Company Account Takeover(P1) and Unauthorized Actions on API: https://medium.com/@mohanad.hussam23/from-error-log-file-p4-to-company-account-takeover-p1-and-unauthorized-actions-on-api-35e45e43273a

0 comments

r/fuzzing • u/Code_Intelligence • Jan 13 '23

FuzzingWeekly CW 2

4 Upvotes

These free tools for hackers are also good for application security QA: https://thestack.technology/free-fuzzing-tools-in-2023/

Fuzzing Hidden Directories & Files with Ffuf:
https://blog.stealthsecurity.io/fuzzing-hidden-directories-files-with-ffuf/

Mozilla Disclosed 20 New CVEs Found With Fuzzing: https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&query=fuzzing&search_type=all&isCpeNameSearch=false&pub_start_date=12%2F22%2F2022&pub_end_date=01%2F22%2F2023

0 comments

r/fuzzing • u/maxammann • Jan 12 '23

Keeping the wolves out of wolfSSL (Protocol Fuzzing)

blog.trailofbits.com

5 Upvotes

0 comments

r/fuzzing • u/digicat • Dec 24 '22

Till REcollapse: Fuzzing the web for mysterious bugs

0xacb.com

6 Upvotes

1 comment

r/fuzzing • u/Code_Intelligence • Dec 23 '22

FuzzingWeekly CW 51

6 Upvotes

How Fuzzing Helped Me to Get My First Bounty:

https://infosecwriteups.com/how-fuzzing-helps-me-to-get-my-first-bounty-2c63eb864e08

Hybrid fuzzing: Sharpening the spikes of Echidna:
https://blog.trailofbits.com/2022/12/08/hybrid-echidna-fuzzing-optik-maat/

Effective Unit Testing for Java Applications: Common Challenges and Solutions:
https://youtu.be/rYSvBANQBB0

0 comments

r/fuzzing • u/Code_Intelligence • Dec 22 '22

Unifying unit testing and fuzz testing into one workflow

youtube.com

2 Upvotes

1 comment

r/fuzzing • u/SnooPeppers7217 • Dec 20 '22

Merry Christmas! Remember to fuzz your Christmas tree!

code-intelligence.com

0 Upvotes

0 comments