📡 [Monthly Fuzzing] December 2020

Patrick Ventuzelo
Jan 5, 2021
First of all happy new year and all the best for 2021 🎉 

I've listed almost 30 interesting resources released this month, hope you will enjoy 😉

📺 Videos / Podcast
  • Fuzzing 101 by @metzman - link
  • FuzzOS: Day 1, starting the OS - link
  • FuzzOS: Getting the OS running on ARM64 hardware (Part 1/2) - link
  • FuzzOS: Getting the OS running on ARM64 hardware (Part 2/2) - link
  • Android Kernel Exploitation workshop - link
  • Fuzzing the Phone in the iPhone - link
  • Fuzzers Like Lego @rC3 - video / slides

📝 Blogpost/Paper/Slides
  • An iOS zero-click radio proximity exploit odyssey - link
  • Ios 1-day hunting: uncovering and exploiting cve-2020-27950 kernel memory leak - link
  • The Relevance of Classic Fuzz Testing: Have We Solved This One? - link
  • FuzzOS - Summary - link
  • OSS-Fuzz: Integrating a Python project - link
  • Fuzzing Zcash with Kubernetes - link
  • Closing the RISC-V Compliance Gap via Fuzzing - link
  • Enabling coverage guided-binary fuzzing on macOS - link
  • Root Cause Analysis of a Heap-Based Buffer Overflow in GNU Readline - link
  • Finding Vulnerabilities using Advanced Fuzz testing and AFLplusplus v3.0 - link
  • Resmack: Part 4: Grammar Mutations - link
  • Resmack: Part 5: Grammar Mutation and Recursion - link
  • How I Found My First Ever ZeroDay (In RDP) - link

⚙️ Tools / Repository
  • Healer, a kernel fuzzer inspired by syzkaller written in Rust - link
  • GUSTAVE - Embedded OS kernel fuzzer - link
  • UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities - link
  • WinAFL Pet: a web user interface dedicated to WinAFL remote management - link
  • afl++ 3.00c released - link
  • libfiowrapper - library to help fuzzing application that are reading data from the file - link 
  • Jackalope - Customizable, distributed, coverage-guided fuzzer that is able to work with black-box binaries - link
  • Coldsnap - Python Snapshot Fuzzer Example - link
  • Fuzz a Linux kernel module using AFL through the Xen VMI API  - link

Don't forget that you have 10% discount on all the courses using the HNY2021 coupon or by following this link 😉

📡 Socials: Twitter | Telegram | Youtube

Patrick