Josh Bundt retweeted
Introducing ARTIPHISHELL! An LLM-Based Cyber Reasoning System made by @shellphish that autonomously finds and patches vulnerabilities for the @DARPA AIxCC competition (support.shellphish.net)
Josh Bundt retweeted
I’ve never experienced anything like #ArmyNavy. This is an unbelievable atmosphere.
Josh Bundt retweeted
The blog post about the libwebp vulnerability fuzzing is up, it explains how I set up the experiment, how the crash was found and why oss-fuzz was not able to find it: srlabs.de/blog-post/advanced… #fuzzing @metzmanj
Josh Bundt retweeted
Dropping #Downfall, exploiting speculative forwarding of 'Gather' instruction to steal data from hardware registers. #MeltdownSequel
- Practical to exploit (POC/Demo)
- Defeat all isolation boundaries (OS, VM, SGX)
- Bypass all Meltdown/MDS mitigations.
downfall.page
Josh Bundt retweeted
Open Source Insights and OSS-Fuzz are now interconnected. You can see an OSS-Fuzz project's fuzzing coverage (Code coverage, configuration, etc) right inside deps.dev. Read more at blog.deps.dev/oss-fuzz/
Josh Bundt retweeted
introducing “Implement DNS in a Weekend” jvns.ca/blog/2023/05/12/intr…
Josh Bundt retweeted
We are excited to share a #PluginFocus blog post from @sk3wl – the author of the IDA Pro Book! In this article, he introduces his #SK3wldbg plugin. It is worthwhile reading it 🌐 hex-rays.com/blog/plugin-foc…
#IDAPro #IDAPython #IDAPlugin
ALT Plugin Focus - SK3wldbg
Josh Bundt retweeted
6 yrs since @Google OSS-Fuzz started, reached 850 projects, fixed 8,800 vulns & 28,000 stability bugs & next we are bumping up OSS-Fuzz rewards: more reward categories for improving coverage and horizontal leet rewards for impacting hundreds of projects - security.googleblog.com/2023…
Josh Bundt retweeted
New #OSSFuzz stats:
📅: 6 years
📈: 850 projects
🕷️: 8.8k vulns
🐞: 28k bugs
Amazing work from the #GOSST team!
security.googleblog.com/2023…
Josh Bundt retweeted
The OSS-Fuzz and FuzzBench team is helping to run the SBFT'23 fuzzing competition this year!
sbft23.github.io/tools/fuzzi…
Please submit an entry if you're interested in participating! Entries for expressing interest close on Jan 13.
Josh Bundt retweeted
Army wins! Final score: Army 20 - Navy 17 *Sing Second! #ArmyNavyGame #SingSecond #GoArmyBeatNavy #BEATnavy
@SecArmy @ArmyChiefStaff @USMA_Admissions @USArmy @1stArmoredDiv @ArmyNavyGame @WPAOG @ArmyWP_Football @DMI_West_Point @USArmySMA @
Josh Bundt retweeted
It's #BEATAIRFORCE Week! 🇺🇸 ⚔️ - Compelling lessons about US Air Force Academy history according to the Dean of the Academic Board #WestPoint! #GoArmy
@DeanUsma | @Commandant_USMA | @USArmy | @SecArmy | @ArmyChiefStaff | @1stCavalryDiv | @AF_Academy | @GoArmyWestPoint
Josh Bundt retweeted
If you are willing to put your fuzzer to the test, SBFT'23 will host a 🚨FUZZING COMPETITION🚨
If you would like to know how to participate, look at the instructions: sbft23.github.io/tools/fuzzi…
#ICSE2023 #ICSE23 #SBFT2023 #SBFT23 #Fuzzing #FuzzTesting
Josh Bundt retweeted
A couple months overdue, here's the open source release of Concurrence, my new fuzzing library for thread-based targets. Integration code to SockFuzzer, plus Mach process/IPC/VM/etc. support are coming soon. Check it out at github.com/googleprojectzero…
Josh Bundt retweeted
New blog post is live! In which I download 4 TB of Python packages containing native x86-64 libraries and see how many of them use -ffast-math, potentially altering floating point behavior in any program unlucky enough to load them! moyix.blogspot.com/2022/09/s…
I got the coolest gift for Father's Day! A personalized LEGO search and find!! Thanks for the fun idea @LEGO_Group!
ALT LEGO City Search and Find book titled "Where's Dad?"
ALT Inside cover of book "Happy Father's Day"
ALT Back cover of book, "Can you spot Dad?"
Josh Bundt retweeted
I added symbol support to my /proc/<pid>/mem IDA loader. Load up a running process into your system without having to attach a debugger, and get full symbols for all files in it (well, with DWARF symbols that is). Works great for WINE processes! github.com/gamozolabs/proc_m…
Josh Bundt retweeted
We’re excited to release ClusterFuzzLite, fuzzing infra for everyone that runs in GitHub Actions, Google Cloud Build, Prow or any other CI you use.
ClusterFuzzLite does: pull request fuzzing, longer batch fuzzing, coverage reports and corpus pruning
security.googleblog.com/2021…
