lrngjcb
Researchers Discover Kill Switch' in Starlink Terminals – Fuzzing Weekly CW10
How to find arbitrary code execution vulnerabilities in Java with fuzz testing
Fuzzing Java to Find Log4j Vulnerability – CVE-2021-45046
Re:Finding the log4j RCE With Fuzzing
on Monday December 13, 2021 @12:23PM (#29541780)
Hindsight is 20/20, but with a hook on javax.naming.Context#lookup and a generally useful improvement to the Map instrumentation, Jazzer reliably finds #log4j CVE-2021-44228 in ~5 min with a one-line fuzz target:
log.error(data.consumeRemainingAsString());
Finding the log4j RCE With Fuzzing
Re:Angry Developers – A Qualitative Study on Developers’ Struggles wit...
on Thursday September 23, 2021 @11:37AM (#28630738)
I did my research. The paper is already published:
https://publications.cispa.saarland/3463/1/roth2021usable.pd...
Angry Developers – A Qualitative Study on Developers’ Struggles with CSP
Swisscom Startup Challenge: These are the 5 winners
Re:CVE in jsoup: users should upgrade to version 1.14.2 [CVSS 7.5]
on Wednesday August 18, 2021 @05:38AM (#28219187)
Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions
CVE in jsoup: users should upgrade to version 1.14.2 [CVSS 7.5]
How to Fuzz Complex Microservices in 5 Easy Steps
Re:How to Fuzz Complex Microservices in 5 Easy Steps
on Thursday July 29, 2021 @07:43AM (#27995315)
Well, it's actually not that easy... :D
Critical 9.9 Vulnerability in Hyper-V Allowed Attackers to Exploit Azure
Chrome zero-day. Patch now
Fuzzing Embedded Applications with Dependencies
Expanding the Reach of Fuzzing
Static Mocking vs. Mocking with Fuzz Data (Embedded)
Expanding the Reach of Fuzzing
Upgrade to Apache PDFBox 2.0.23 fixed OutOfMemoryError
Re:New Conference on WebSecurity
on Tuesday March 02, 2021 @09:58AM (#26315953)
Looking for your feedback: It is still possible to submit questions for the panel discussion. Which questions should the speakers address?
New Conference on WebSecurity
Google sanitizers become as normal as washing hands
Re:How to instrument JVM bytecode for fuzzing (open-source)
on Tuesday February 16, 2021 @10:16AM (#26154594)
A couple of days ago there was also a discussion on a similar topic on HN: https://news.ycombinator.com/item?id=26090139