lrngjcb

9 ms·

1.
Weekly Fuzzing Newsletter – Fuzzing Weekly CW12(ioc.exchange)
1 points by lrngjcb 4y ago|0 comments
2.
Researchers Discover Kill Switch' in Starlink Terminals – Fuzzing Weekly CW10(ioc.exchange)
2 points by lrngjcb 4y ago|0 comments
3.
How to find arbitrary code execution vulnerabilities in Java with fuzz testing(code-intelligence.com)
2 points by lrngjcb 4y ago|0 comments
4.
Fuzzing Java to Find Log4j Vulnerability – CVE-2021-45046(youtube.com)
1 points by lrngjcb 5y ago|0 comments
5.
Finding the log4j RCE With Fuzzing(code-intelligence.com)
1 points by lrngjcb 5y ago|1 comments
6.
by lrngjcb 5y ago
Hindsight is 20/20, but with a hook on javax.naming.Context#lookup and a generally useful improvement to the Map instrumentation, Jazzer reliably finds #log4j CVE-2021-44228 in ~5 min with a one-line fuzz target: log.error(data.consume
7.
by lrngjcb 5y ago
I did my research. The paper is already published: https://publications.cispa.saarland/3463/1/roth2021usable.pd...
8.
Angry Developers – A Qualitative Study on Developers’ Struggles with CSP(fuzzcon.eu)
1 points by lrngjcb 5y ago|1 comments
9.
Swisscom Startup Challenge: These are the 5 winners(twitter.com)
1 points by lrngjcb 5y ago|0 comments
10.
CVE in jsoup: users should upgrade to version 1.14.2 [CVSS 7.5](github.com)
3 points by lrngjcb 5y ago|1 comments
11.
by lrngjcb 5y ago
Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions
12.
How to Fuzz Complex Microservices in 5 Easy Steps(blog.code-intelligence.com)
2 points by lrngjcb 5y ago|1 comments
13.
by lrngjcb 5y ago
Well, it's actually not that easy... :D
14.
Critical 9.9 Vulnerability in Hyper-V Allowed Attackers to Exploit Azure(guardicore.com)
3 points by lrngjcb 5y ago|0 comments
15.
Chrome zero-day. Patch now(nakedsecurity.sophos.com)
3 points by lrngjcb 5y ago|0 comments
16.
Fuzzing Embedded Applications with Dependencies(blog.code-intelligence.com)
1 points by lrngjcb 5y ago|0 comments
17.
Expanding the Reach of Fuzzing(blog.code-intelligence.com)
1 points by lrngjcb 5y ago|0 comments
18.
Static Mocking vs. Mocking with Fuzz Data (Embedded)(blog.code-intelligence.com)
1 points by lrngjcb 5y ago|0 comments
19.
Expanding the Reach of Fuzzing(blog.code-intelligence.com)
1 points by lrngjcb 6y ago|0 comments
20.
Upgrade to Apache PDFBox 2.0.23 fixed OutOfMemoryError(pdfbox.apache.org)
1 points by lrngjcb 6y ago|0 comments
21.
New Conference on WebSecurity(fuzzcon.eu)
11 points by lrngjcb 6y ago|2 comments
22.
by lrngjcb 6y ago
Looking for your feedback: It is still possible to submit questions for the panel discussion. Which questions should the speakers address?
23.
Google sanitizers become as normal as washing hands(blog.code-intelligence.com)
1 points by lrngjcb 6y ago|1 comments
24.
by lrngjcb 6y ago
A couple of days ago there was also a discussion on a similar topic on HN: https://news.ycombinator.com/item?id=26090139
25.
Fuzz me wrong – How QuickCheck destroyed my favourite theory(thma.github.io)
126 points by lrngjcb 6y ago|57 comments
26.
Jazzer brings modern fuzz testing to the JVM(blog.code-intelligence.com)
68 points by lrngjcb 6y ago|23 comments
27.
Fuzz Testing Is Teamwork – No More Fuzzing Ninja-Style(blog.code-intelligence.com)
2 points by lrngjcb 6y ago|0 comments
28.
How to Spot Good Fuzzing Research(blog.trailofbits.com)
2 points by lrngjcb 6y ago|0 comments