Channel Public Channel

Alaid TechThread

@offensive_thread

Vulnerability discovery, threat intelligence, reverse engineering, AppSec

Open in Telegram

Subscribers: 1.13K
Photos: 7
Videos: 2
Links: 1.4K

Showing posts older than #1349 · Back to latest

Older Posts 20 shown

Post #1348 308 May 27, 2024, 07:18 UTC

Introducing LLM-based harness synthesis for unfuzzed projects

https://blog.oss-fuzz.com/posts/introducing-llm-based-harness-synthesis-for-unfuzzed-projects/

OSS-Fuzz blog Introducing LLM-based harness synthesis for unfuzzed projects Introducing LLM-based harness generation for unfuzzed projects.

👍 2

Post #1347 376 May 24, 2024, 13:00 UTC

scaml_lite_full.pdf2.9 MB

SCAML Lite

Data Driven подход к сигнатурному
анализу пакетов

#phdays #ml

👍 6
🔥 1

Post #1346 370 May 23, 2024, 12:01 UTC

SCAML_PHD2.pdf19.4 MB

SCAML

Transformer-based code vectorization for robust recognition of software components and dependencies

#phdays #ml #ai

👍 9
🔥 1

Post #1344 303 May 17, 2024, 06:58 UTC

Talos releases new macOS open-source fuzzer

https://blog.talosintelligence.com/talos-releases-new-macos-fuzzer/

Cisco Talos Talos releases new macOS open-source fuzzer Compared to fuzzing for software vulnerabilities on Linux, where most of the code is open-source, targeting anything on macOS presents a few difficulties.

Post #1343 321 May 3, 2024, 18:54 UTC

Your NVMe Had Been Syz’ed: Fuzzing NVMe-oF/TCP Driver for Linux with Syzkaller

https://www.cyberark.com/resources/threat-research-blog/your-nvme-had-been-syzed-fuzzing-nvme-of-tcp-driver-for-linux-with-syzkaller

Palo Alto Networks Idira | The Identity Security Platform Protect your organization with Idira®. Modernize identity governance, automate access reviews, and secure every identity across your hybrid cloud environment.

Post #1342 354 Apr 18, 2024, 07:38 UTC

Prompt Fuzzer: open-source tool to help you harden your GenAI applications

https://github.com/prompt-security/ps-fuzz

GitHub GitHub - prompt-security/ps-fuzz: Make your GenAI Apps Safe & Secure Test & harden your system prompt Make your GenAI Apps Safe & Secure :rocket: Test & harden your system prompt - prompt-security/ps-fuzz

Post #1341 463 Apr 15, 2024, 05:51 UTC

Code Security Vulnerability Repair Using Reinforcement Learning with Large Language Models

https://arxiv.org/pdf/2401.07031.pdf

Post #1340 372 Apr 10, 2024, 02:59 UTC

DJI Mavic 3 Drone Research

https://www.nozominetworks.com/blog/dji-mavic-3-drone-research-part-1-firmware-analysis

https://www.nozominetworks.com/blog/dji-mavic-3-drone-research-part-2-vulnerability-analysis

Nozominetworks DJI Mavic 3 Drone Research Part 1: Firmware Analysis Nozomi Networks Labs recently conducted firmware analysis on a DJI Mavic 3 Series drone. Learn more about their findings.

👍 1

Post #1339 352 Mar 25, 2024, 20:35 UTC

Why fuzzing over formal verification?

https://blog.trailofbits.com/2024/03/22/why-fuzzing-over-formal-verification/

The Trail of Bits Blog Why fuzzing over formal verification? We recently introduced our new offering, invariant development as a service. A recurring question that we are asked is, “Why fuzzing instead of formal verification?” And the answer is, “It’s complicated.” We use fuzzing for most of our audits but have used…

Post #1338 420 Mar 21, 2024, 19:37 UTC

Т-Образование Если вы знаете основы информационной безопасности, умеете искать уязвимости в системах и уважаете конфиденциальность — вам определенно может быть интересна эта стажировка 🔒 Три команды — AppSec, DevSecOps и Security Research — готовы взять стажеров на лето…

Результаты стажировки 2023 года одной из команд по теме Binary SCA и применению методов машинного обучения описали на Хабре:

Intro: https://habr.com/ru/companies/tinkoff/articles/795061/
Part 1: https://habr.com/ru/companies/tinkoff/articles/796919/
Part 2: https://habr.com/ru/companies/tinkoff/articles/801777/

👍 4
🔥 2

Post #1337 312 Mar 12, 2024, 19:59 UTC

K-LEAK: Towards Automating the Generation of Multi-Step Infoleak Exploits against the Linux Kernel

https://www.ndss-symposium.org/wp-content/uploads/2024-935-paper.pdf

Post #1336 331 Mar 12, 2024, 19:57 UTC

SyzBridge: Bridging the Gap in Exploitability
Assessment of Linux Kernel Bugs in the Linux
Ecosystem

https://www.ndss-symposium.org/wp-content/uploads/2024-926-paper.pdf

👍 1

Post #1335 276 Mar 12, 2024, 19:53 UTC

SyzRetrospector: A Large-Scale Retrospective Study of Syzbot

https://arxiv.org/pdf/2401.11642.pdf

Post #1334 281 Mar 9, 2024, 17:40 UTC

Alaid TechThread Пример реализации фаззинг-обвязки средствами LLM (Claude 3) https://gist.github.com/moyix/02029770cb4f7afc2ae91a01b3929118

Using LLMs to Generate Fuzz Generators

https://verse.systems/blog/post/2024-03-09-using-llms-to-generate-fuzz-generators/

Toby's Blog Using LLMs to Generate Fuzz Generators LLMs seem surprisingly good at many things. So much so that not a week goes by without someone coming up with yet another use-case for this technology, often to solve tasks quickly that traditionally …

Post #1333 242 Mar 8, 2024, 17:40 UTC

Пример реализации фаззинг-обвязки средствами LLM (Claude 3)

https://gist.github.com/moyix/02029770cb4f7afc2ae91a01b3929118

Gist Claude 3 writes a fuzzer Claude 3 writes a fuzzer. GitHub Gist: instantly share code, notes, and snippets.

Post #1332 404 Mar 8, 2024, 13:05 UTC

Generate and Pray: Using SALLMS to Evaluate the Security of LLM Generated Code

https://arxiv.org/pdf/2311.00889.pdf

👍 4

Post #1331 406 Mar 8, 2024, 13:02 UTC

Security Code Review by LLMs: A Deep Dive into Responses

https://arxiv.org/pdf/2401.16310.pdf

👍 2
🔥 1

Post #1330 453 Feb 26, 2024, 18:56 UTC

Trail of Bits Testing Handbook

https://appsec.guide

Testing Handbook Introduction The automated testing handbook is a resource that guides developers and security professionals in configuring, optimizing, and automating many of the static and dynamic analysis tools we use at Trail of Bits.

👍 2

Post #1329 253 Feb 23, 2024, 18:09 UTC

Continuously fuzzing Python C extensions

https://blog.trailofbits.com/2024/02/23/continuously-fuzzing-python-c-extensions/

The Trail of Bits Blog Continuously fuzzing Python C extensions Deserializing, decoding, and processing untrusted input are telltale signs that your project would benefit from fuzzing. Yes, even Python projects. Fuzzing helps reduce bugs in high-assurance software developed in all programming languages. Fortunately for…

Post #1327 351 Feb 18, 2024, 22:16 UTC

KernelGPT: Enhanced Kernel Fuzzing via Large Language Models

https://arxiv.org/pdf/2401.00563.pdf

Older posts →