Post #1326
327
Channel Public Channel
AL Alaid TechThread
@offensive_thread
Vulnerability discovery, threat intelligence, reverse engineering, AppSec
- Subscribers
- 1.13K
- Photos
- 7
- Videos
- 2
- Links
- 1.4K
Showing posts older than #1327 · Back to latest
Older Posts 20 shown
Post #1325
464
Post #1324
246
Underutilized Fuzzing Strategies for Modern Software Testing
https://www.youtube.com/watch?v=fMzeIv4U4LI
YouTube Underutilized Fuzzing Strategies for Modern Software Testing Trail of Bits hosted one of LibAFL's maintainers and CISPA PhD candidate, Addison Crump, for our weekly internal Lunch and Learn session. While fuzzing is commonly associated with memory corruption vulnerabilities, it also has great potential for invariant… https://www.youtube.com/watch?v=fMzeIv4U4LI
Post #1323
244
Lost in Translation: A Study of Bugs Introduced by Large Language Models while Translating Code
https://arxiv.org/abs/2308.03109
arXiv.org Lost in Translation: A Study of Bugs Introduced by Large Language... Code translation aims to convert source code from one programming language (PL) to another. Given the promising abilities of large language models (LLMs) in code synthesis, researchers are... https://arxiv.org/abs/2308.03109
- 👍 2
Post #1322
280
Post #1321
303
Introducing broad C/C++ vulnerability management support
https://osv.dev/blog/posts/introducing-broad-c-c++-support/
osv.dev OSV - Open Source Vulnerabilities Comprehensive vulnerability database for your open source projects and dependencies. https://osv.dev/blog/posts/introducing-broad-c-c++-support/
Post #1320
230
GWP-ASan: Sampling-Based Detection of Memory-Safety Bugs in Production
This paper describes a family of tools that detect these two classes of memory-safety bugs, while running in production, at near-zero overhead. These tools combine page-granular guarded allocation and low-rate sampling. In other words, we added an “if” statement to a 36-year-old idea and made it work at scale
https://arxiv.org/pdf/2311.09394.pdf
This paper describes a family of tools that detect these two classes of memory-safety bugs, while running in production, at near-zero overhead. These tools combine page-granular guarded allocation and low-rate sampling. In other words, we added an “if” statement to a 36-year-old idea and made it work at scale
https://arxiv.org/pdf/2311.09394.pdf
Post #1319
222
Escaping the sandbox: A bug that speaks for itself
https://microsoftedge.github.io/edgevr/posts/Escaping-the-sandbox-A-bug-that-speaks-for-itself/
Microsoft Browser Vulnerability Research Escaping the sandbox: A bug that speaks for itself Introduction https://microsoftedge.github.io/edgevr/posts/Escaping-the-sandbox-A-bug-that-speaks-for-itself/
- 🔥 1
Post #1318
235
Post #1317
300
FASER: Binary Code Similarity Search through the use of Intermediate Representations
https://arxiv.org/pdf/2310.03605.pdf
https://arxiv.org/pdf/2310.03605.pdf
- 👍 1
Post #1316
297
Do Language Models Learn Semantics of Code? A Case Study in Vulnerability Detection
https://arxiv.org/pdf/2311.04109.pdf
https://arxiv.org/pdf/2311.04109.pdf
Post #1315
235
Post #1314
192
- 👍 1
Post #1313
235
Snapshot fuzzing direct composition with WTF
https://blog.talosintelligence.com/snapshot-fuzzing-direct-composition-with-wtf/
https://blog.talosintelligence.com/snapshot-fuzzing-direct-composition-with-wtf/
Post #1312
243
Chalk™ captures metadata at build time, and can add a small 'chalk mark' (metadata) to any artifacts, so they can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this.
https://github.com/crashappsec/chalk
GitHub GitHub - crashappsec/chalk: Chalk allows you to follow code from development, through builds and into production. Chalk allows you to follow code from development, through builds and into production. - crashappsec/chalk https://github.com/crashappsec/chalk
Post #1311
502
Post #1310
482
Post #1309
235
LLMs at the Forefront Pioneering the Future of Fuzz Testing
https://www.youtube.com/watch?v=k9gt7MNXPDY
YouTube DEF CON 31 - LLMs at the Forefront Pioneering the Future of Fuzz Testing - X Large Language Models are already revolutionizing the software development landscape. As hackers we can only do what we've always done, embrace the machine and use it to do our bidding.
There are many valid criticisms of GPT models for writing code like… https://www.youtube.com/watch?v=k9gt7MNXPDY
Post #1308
185
https://github.com/intel/tsffs
A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS
A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS
Post #1307
229
ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP
https://arxiv.org/pdf/2308.02122.pdf
https://arxiv.org/pdf/2308.02122.pdf
- 🔥 2