OffensiveCon2022: Case Studies of Fuzzing with Xen - Download as a PDF or view online for free

Introduction On the 7th of February, Microsoft announced an impending change to its ubiquitous suite of Office apps. In Microsoft’s own words: “VBA macros obtained from the internet will now be blocked by default”. The change is expected to begin rolling…

FitM, the Fuzzer in the Middle, can fuzz client and server binaries at the same time using userspace snapshot-fuzzing and network emulation. It's fast and comparably easy to set up. - fgsect/FitM

A must-read for fuzzing fans, this post gives a detailed look at the advanced techniques used in our recent discovery of multiple bugs in Defender for IoT.

GraphFuzz is an experimental framework for building structure-aware, library API fuzzers. - hgarrereyn/GraphFuzz

Beaconfuzz - A Journey into Ethereum 2.0 Blockchain Fuzzing and Vulnerability Discovery
https://www.offensivecon.org/speakers/2022/patrick-ventuzelo.html

https://www.offensivecon.org/speakers/2022/tamas-k-lengyel-and-b%C3%A1lint-varga-perke.html

Interactive Kubernetes Security Learning Playground

Using syzkaller to fuzz the Linux kernel network stack externally

By applying well-known fuzzing techniques to a popular target, I found several bugs that in total yielded over $200K in bounties. In this article I will demonstrate how powerful fuzzing can be when applied to software which has not yet faced sufficient testing.

ClusterFuzzLite - Simple continuous fuzzing that runs in CI. - google/clusterfuzzlite

State-of-the-art native debugging tools. Contribute to HyperDbg/HyperDbg development by creating an account on GitHub.

Fuzzing the CNCF Landscape - Adam Korczynski & David Korczynski, Ada Logics

This talk presents Adam’s and David’s experience with fuzzing more than ten projects in the CNCF landscape over the last year resulting in more than hundred bugs filed and fixed.…

CVE-2022-26134 Proof of Concept. Contribute to jbaines-r7/through_the_wire development by creating an account on GitHub.