Running HashiCorp Vault in Production by Dan McTeer.pdf
2.6 MB
Running HashiCorp Vault in Production by Dan McTeer
PM for Password
PM for Password
🔥2👍1
Offensive Windows IPC Internals 3: ALPC
https://csandker.io/2022/05/24/Offensive-Windows-IPC-3-ALPC.html
https://csandker.io/2022/05/24/Offensive-Windows-IPC-3-ALPC.html
HyperDbg Debugger: State-of-the-art native Windows debugging tool designed for analyzing, fuzzing and reversing - https://github.com/HyperDbg/HyperDbg
GitHub
GitHub - HyperDbg/HyperDbg: State-of-the-art native debugging tools
State-of-the-art native debugging tools. Contribute to HyperDbg/HyperDbg development by creating an account on GitHub.
Fuzzing the CNCF Landscape - https://youtu.be/zIyIZxAZLzo
YouTube
Fuzzing the CNCF Landscape - Adam Korczynski & David Korczynski, Ada Logics
Fuzzing the CNCF Landscape - Adam Korczynski & David Korczynski, Ada Logics
This talk presents Adam’s and David’s experience with fuzzing more than ten projects in the CNCF landscape over the last year resulting in more than hundred bugs filed and fixed.…
This talk presents Adam’s and David’s experience with fuzzing more than ten projects in the CNCF landscape over the last year resulting in more than hundred bugs filed and fixed.…
High Performance Coverage-guided Greybox Fuzzer with Custom JIT Engine
https://seal9055.com/blog/fuzzing/sfuzz
https://seal9055.com/blog/fuzzing/sfuzz
SnapFuzz: High-Throughput Fuzzing of Network Applications
https://srg.doc.ic.ac.uk/files/papers/snapfuzz-issta-22.pdf
https://srg.doc.ic.ac.uk/files/papers/snapfuzz-issta-22.pdf
Effectiveness and Scalability of Fuzzing Techniques in CI/CD Pipelines
https://arxiv.org/pdf/2205.14964.pdf
https://arxiv.org/pdf/2205.14964.pdf
Improving Security by Fuzzing the CNCF landscape - https://www.cncf.io/blog/2022/06/28/improving-security-by-fuzzing-the-cncf-landscape/
CNCF
Improving Security by Fuzzing the CNCF landscape
By Chris Aniszczyk (CNCF), Adam Korczynski (Ada Logics), David Korczynski (Ada Logics) In this blog post we present an overview of the state of fuzzing across CNCF projects. This is based on efforts…
👍2
Fuzzing Image Parsing in Windows, Part Four: More HEIF - https://www.mandiant.com/resources/fuzzing-image-parsing-windows-part-four
Google Cloud Blog
Fuzzing Image Parsing in Windows, Part Four: More HEIF | Google Cloud Blog
Another Way to Talk with Browser: Exploiting Chrome at Network Layer - https://i.blackhat.com/USA-22/Thursday/US-22-Rong-Another-Way-to-Talk-with-Browser-Exploiting-Chrome-at-Network-Layer.pdf
eBPF ELFs JMPing Through the Windows - https://i.blackhat.com/USA-22/Thursday/US-22-Johnson-eBPF-ELFs-JMPing-Through-the-Windows.pdf
👎1
Jazzer.Js Brings Fuzzing To JavaScript
https://www.code-intelligence.com/blog/jazzer.js
https://github.com/CodeIntelligenceTesting/jazzer.js
https://www.code-intelligence.com/blog/jazzer.js
https://github.com/CodeIntelligenceTesting/jazzer.js
Code-Intelligence
Jazzer.js Brings Effective Fuzzing to JavaScript (Open-Source)
Jazzer.js is an open-source fuzzer for the Node.js platform. It is based on libFuzzer and brings many of its features to the JavaScript ecosystem.
Attacking Firecracker: AWS' microVM Monitor Written in Rust - https://www.graplsecurity.com/post/attacking-firecracker
Jit-Picking: Differential Fuzzing of JavaScript Engines
https://publications.cispa.saarland/3773/1/2022-CCS-JIT-Fuzzing.pdf
https://publications.cispa.saarland/3773/1/2022-CCS-JIT-Fuzzing.pdf
Fuzzing Host-to Guest Attack Surface in Android Protected KVM
https://www.youtube.com/watch?v=cJjjlSG6JEA
https://www.youtube.com/watch?v=cJjjlSG6JEA
YouTube
Fuzzing Host-to Guest Attack Surface in Android Protected KVM- Eugene Rodionov & Will Deacon, Google
Fuzzing Host-to Guest Attack Surface in Android Protected KVM - Eugene Rodionov & Will Deacon, Google
Android 13 introduces native support of virtualization services built on top of Protected KVM (pKVM) for arm64 devices. Unlike in traditional KVM where…
Android 13 introduces native support of virtualization services built on top of Protected KVM (pKVM) for arm64 devices. Unlike in traditional KVM where…
Making Fuzzing Part of Your Software Development Lifecycle
https://www.youtube.com/watch?v=eg7SiXr31Qk
https://www.youtube.com/watch?v=eg7SiXr31Qk
YouTube
Making Fuzzing Part of Your Software Development Lifecycle - Jonathan Metzman, Google
Making Fuzzing Part of Your Software Development Lifecycle - Jonathan Metzman, Google
Fuzzing is a testing technique that uses randomized inputs to find bugs in software. Fuzzing is the most successful automated vulnetability/bug-finding technique and has…
Fuzzing is a testing technique that uses randomized inputs to find bugs in software. Fuzzing is the most successful automated vulnetability/bug-finding technique and has…
CONFETTI: Amplifying Concolic Guidance for Fuzzers
https://www.youtube.com/watch?v=4WOPUFNeZXg
https://srg.doc.ic.ac.uk/klee22/talks/Kukucka-Confetti.pdf
https://www.youtube.com/watch?v=4WOPUFNeZXg
https://srg.doc.ic.ac.uk/klee22/talks/Kukucka-Confetti.pdf
YouTube
CONFETTI: Amplifying Concolic Guidance for Fuzzers
James Kukucka from George Mason University at the 3nd International KLEE Workshop on Symbolic Execution
KLEE Workshop 2022: https://srg.doc.ic.ac.uk/klee22/
Slides: https://srg.doc.ic.ac.uk/klee22/talks/Kukucka-Confetti.pdf
KLEE Workshop 2022: https://srg.doc.ic.ac.uk/klee22/
Slides: https://srg.doc.ic.ac.uk/klee22/talks/Kukucka-Confetti.pdf