Cornelius Aschermann
@is-eqv.bsky.social
📤 369
📥 95
📝 35
Fuzzing & stuff
https://hexgolems.com
reposted by
Cornelius Aschermann
dmnk
27 days ago
Must-read for fuzzing folks (read: tooling/algorithms/academia) by Addison Crump
addisoncrump.info/research/wha...
loading . . .
What the hell are we doing? · Addison Crump
Homepage for Addison Crump
https://addisoncrump.info/research/what-the-hell-are-we-doing/
1
30
11
Thanks to Viet Hoang Luu's effort AFL++ just got IJON support:
github.com/AFLplusplus/...
loading . . .
IJON Full Implementation by vi3tL0u1s · Pull Request #2540 · AFLplusplus/AFLplusplus
IJON Full Implementation This is a complete implementation of all IJON features for source code instrumentation in AFL++. Base commit: 6b6cc9c1 Note to maintainers: This PR is based on a commit, th...
https://github.com/AFLplusplus/AFLplusplus/pull/2540
2 months ago
0
7
0
drops.dagstuhl.de/storage/01oa...
can we get this builtin in lldb please?
loading . . .
https://drops.dagstuhl.de/storage/01oasics/oasics-vol134-programming2025/OASIcs.Programming.2025.8/OASIcs.Programming.2025.8.pdf
2 months ago
0
2
0
reposted by
Cornelius Aschermann
dmnk
4 months ago
Our Big Sleep LLM Agent found critical vulns 📈📈📈
#BigSleep
blog.google/technology/s...
loading . . .
A summer of security: empowering cyber defenders with AI
Here’s what we’re announcing at cybersecurity conferences like Black Hat USA and DEF CON 33.
https://blog.google/technology/safety-security/cybersecurity-updates-summer-2025/
0
10
1
reposted by
Cornelius Aschermann
David Buchanan
6 months ago
cut my heap into pieces, this is my crash report: allocation, no alignment don't give a fuck if it faults on assignment this is fatal abort()
6
442
77
reposted by
Cornelius Aschermann
Stefan Nagy
7 months ago
✈️ I'll be at
@icseconf.bsky.social
this week — find me if you'd like to chat about all things fuzzing / binary analysis!
0
3
1
reposted by
Cornelius Aschermann
Zion Leonahenahe Basque
7 months ago
I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025.
sure-workshop.org/
Please follow our workshop account
@sureworkshop
and RT it for visibility :).
loading . . .
SURE 2025 | The Workshop on Software Understanding and Reverse Engineering
The Workshop on Software Understanding and Reverse Engineering
https://sure-workshop.org/
1
7
6
reposted by
Cornelius Aschermann
Marcel Böhme
7 months ago
Our paper "Top Score on the Wrong Exam" paper will be presented at
#ISSTA25
🐣 in Trondheim! 📝https://mpi-softsec.github.io/papers/ISSTA25-topscore.pdf 🧑💻https://github.com/niklasrisse/TopScoreWrongExam //
@nrisse.bsky.social
@fuzzing.bsky.social
1
20
5
reposted by
Cornelius Aschermann
lcamtuf
7 months ago
As it turns out, the C compiler orphan-crushing machine offers no benefit:
web.ist.utl.pt/nuno.lopes/p...
loading . . .
https://web.ist.utl.pt/nuno.lopes/pubs/ub-pldi25.pdf
0
9
3
reposted by
Cornelius Aschermann
Caroline Lemieux
8 months ago
There's still time to submit to FUZZING'25! This year, we're accepting both the (now classic) registered reports _and_ new short papers (fuzzing nuggets). Deadline is now March 26th!
fuzzingworkshop.github.io
loading . . .
FUZZING'25 Workshop @ ISSTA
The 4th International Fuzzing Workshop (FUZZING) 2025 welcomes all researchers, scientists, engineers and practitioners to present their latest research findings, empirical analyses, t...
https://fuzzingworkshop.github.io/
2
10
6
futures.cs.utah.edu/papers/25ICS...
by
@snagycs.bsky.social
and
@gabriel-sherman.bsky.social
Seems like a very sensible approach to harness generation with some impressive results. I'm looking forward to seeing more discussion about this approach :) (sorry for blatantly copying the twitter thing).
8 months ago
0
11
1
Just earlier today I was talking to someone how we are missing out A LOT of power from dynamic language reflection/introspection capabilities in fuzzing, and then I saw this paper:
nebelwelt.net/publications...
- great timing & work
@gannimo.bsky.social
!
loading . . .
https://nebelwelt.net/publications/files/25AsiaCCS.pdf
9 months ago
1
5
1
reposted by
Cornelius Aschermann
dmnk
9 months ago
Leude geht wählen. Vote whatever Elon didn't endorse
add a skeleton here at some point
0
4
1
Super cool to see people build ontop of Nyx:
neodyme.io/en/blog/hype...
loading . . .
Introducing HyperHook: A harnessing framework for Nyx
In this post, we introduce HyperHook, a harnessing framework for snapshot-based fuzzing for user-space applications using Nyx. HyperHook simplifies guest-to-host communication and automates repetitive...
https://neodyme.io/en/blog/hyperhook
10 months ago
0
4
3
reposted by
Cornelius Aschermann
Carl Smith
10 months ago
I’m very excited to announce that we at V8 Security have finally published our first version of Fuzzilli that understands Wasm! Go check it out at
https://github.com/googleprojectzero/fuzzilli
. While we still have a way to go in improving it, we think it shows a promising approach!
1
31
17
aischolar.0x434b.dev
Pretty cool project by
@434b.bsky.social
: A neat web interface to explore security (and in particular: Fuzzing) papers with AI summaries. Seems super useful to get/stay up to date with recent papers :)
loading . . .
AIScholar - Paper Database
https://aischolar.0x434b.dev/?paper=41
10 months ago
0
10
6
reposted by
Cornelius Aschermann
10 months ago
I got Linux running in a PDF file using a RISC-V emulator. PDFs support Javascript, so Emscripten is used to compile the TinyEMU emulator to asm.js, which runs in the PDF. It boots in about 30 seconds and emulates a riscv32 buildroot system.
linux.doompdf.dev/linux.pdf
github.com/ading2210/li...
loading . . .
12
313
151
I have long argued that fuzzers are better at tracking taint than taint tracking.
@andreaszeller.bsky.social
et Al. build a info leak fuzzer (w/o taint tracking):
dl.acm.org/doi/pdf/10.1...
. It finds 10 old CVEs (ASAN: 1). Cool to see a PoC! Would probably work better with snapshot fuzzing tho ;)
10 months ago
0
18
5
pacibsp.github.io/2024/invaria...
Another great blogpost displaying the "The compiler is an evil djinn, secretly trying to corrupt your wishes with the moral compass of tobacco industry lawyers"-model of C semantics.
loading . . .
“Invariant inversion” in memory-unsafe languages
One way of seeing the difference between memory-safe and memory-unsafe languages is that in a memory-safe language, the invariants used to uphold memory safety only “lean on” invariants that are enfor...
https://pacibsp.github.io/2024/invariant-inversion-in-memory-unsafe-languages.html
11 months ago
1
13
5
reposted by
Cornelius Aschermann
dmnk
11 months ago
Re-sharing to keep bluesky rolling
go.bsky.app/EhGFSVj
add a skeleton here at some point
0
45
16
reposted by
Cornelius Aschermann
Marcel Böhme
12 months ago
🔥 No fuzz drivers needed. Our paper on injecting greybox fuzzers into running systems at user-defined amplifier points (in-vivo fuzzing) was accepted at
#ICSE25
! 📝
mboehme.github.io/paper/ICSE25...
🧑💻
github.com/OctavioGalla...
(subject to AE) //Lead by Octavio Galland (former
#MPI_SP
intern).
1
41
12
mboehme.github.io/paper/ICSE25...
Really like this paper. Instead of writing a libfuzzer harness, use the state&arguments from test/E2E fuzzing and note what args can be fuzzed. Interesting follow ups: How to validate a crash in E2E setting & inferring amplification points & constraints dynamically.
loading . . .
https://mboehme.github.io/paper/ICSE25-invivo.pdf
12 months ago
2
12
1
reposted by
Cornelius Aschermann
dmnk
about 1 year ago
Don't really know the purpose of starter packs yet, but here's some people who fuzz(ed). Let me know who I forgot
go.bsky.app/EhGFSVj
add a skeleton here at some point
2
25
8
reposted by
Cornelius Aschermann
Hazel Weakly
about 1 year ago
Company: We have a monolith! Me: ... Company: *holds up diagram of 8 services, 15 databases, and a home grown queue implementation* Me: You fucked up a perfectly good distributed system is what you did. Look at that thing, it's got clock skew.
13
327
41
reposted by
Cornelius Aschermann
Jascha Sohl-Dickstein
almost 2 years ago
Have you ever done a dense grid search over neural network hyperparameters? Like a *really dense* grid search? It looks like this (!!). Blueish colors correspond to hyperparameters for which training converges, redish to those for which training diverges. Even better, a video:
vimeo.com/903855670
7
140
32
reposted by
Cornelius Aschermann
Paged Out!
about 1 year ago
Paged Out! Issue #5 is out now!
pagedout.institute?page=issues....
Happy reading!
0
59
38
you reached the end!!
feeds!
log in