Security Researcher @ Cisco Talos
Romania
Joined July 2014
- Tweets198
- Following363
- Followers477
- Likes1.4K
Part 2 of "Vulnerability Research on Bitdefender's Antivirus Engine" is out.
This part covers the LibAFL + qemu-libafl-bridge snapshot fuzzer I used to target the engine, including some practical tricks and trade-offs.
stackbits.eu/blog/vulnerabil…
I've been wanting to publish a series of blog posts where I tackle a complex and tricky target — from harnessing and instrumentation to scalable format-aware fuzzing, crash reproduction, and disclosing bugs through Bugcrowd.
Part 1 is now live 👇
stackbits.eu/blog/bdcore_par…
Cube🧊 retweeted
End of day 1: the mhackeroni kitchen is in full swing @defcon CTF - let's cook 🔥
Thanks for the support to
🥇 #7Layers - #DRIVESEC
🥈 @_revng - @KeylessTech - @WuerthPhoenix - @CNIT_TLC
🙌 #STACKBITS
Cube🧊 retweeted
Drop by everyone 🦥
Charlas MainTrack #EKO2024 🔥
📌 @domenuk, Co-Maintainer of LibAFL/AFL++ | Android Red Team
💡 “Advanced Fuzzing With LibAFL”: Fuzzing is the art of uncovering vulnerabilities through rapid target re-executions and intelligent input mutations.
In this talk, we'll dive deep into LibAFL, the state-of-the-art fuzzing library by the AFLplusplus project, and explore its more advanced features. As a LibAFL maintainer, I'll walk you through the tricks and techniques that can help you find (or prevent!) vulnerabilities faster, even within complex binary-only targets.
✅ Esta charla será dictada en inglés.
📍 EKOPARTY 2024 - 13, 14 y 15 de noviembre en el CEC - Buenos Aires
🎟️ ¡Últimos días para registrarte gratis! Tenés tiempo hasta el 31/10 >> entradas.ekoparty.org
🚀 Podés ver la agenda completa en ekoparty.org/agenda
Cube🧊 retweeted
I know it’d be a bloodbath, but I’d love to see a pwn2own category for so-called security appliances
Cube🧊 retweeted
Neat, Intel awarded a $5k bug bounty for this report! We donated it to local food bank @2ndharvest, just in time for Christmas! Thank you!! 🎅
New write-up on an Intel Ice Lake CPU vulnerability, we can effectively corrupt the RoB with redundant prefixes! 🔥 An updated microcode is available today for all affected products, cloud providers should patch ASAP.
lock.cmpxchg8b.com/reptar.ht…
Cube🧊 retweeted
I turned a workshop on fuzzing with LibAFL into a blog post for you all, check it out:
atredis.com/blog/2023/12/4/a…
Cube🧊 retweeted
Emulated full system snapshot fuzzing by Intel 👀
haunted.computer/@novafacing…
Cube🧊 retweeted
"How to Build a Fuzzing Corpus" introduces some of the basic theory behind using a seed corpus for fuzzing, and answers three key questions: what is a seed corpus, why are they useful, and how can we build one from scratch? blog.isosceles.com/how-to-bu…
Cube🧊 retweeted
Our work on exploring new ways for efficient firmware fuzzing will be published at @USENIXSecurity 2023!
With SAFIREFUZZ, we introduce near-native rehosting, drastically improving the performance of fuzzing embedded targets.
Super happy about this work w @domenuk @nSinusR
Cube🧊 retweeted
* The 8 new fuzzers are: AFL+++, AFLrustrust, AFLsmart++, HasteFuzz, LearnPerfFuzz, LibAFL_libFuzzer , Pastis, and symsan.
** The 4 baseline fuzzers are: AFL, AFL++, HonggFuzz, and libFuzzer.
They are evaluated by #FuzzBench from Google Open Source Security Team (GOSST).
The battle has started and will last exactly 23 hours, plus hours of post-battle victory assessment. 10k+ CPUs in Google cloud are roaring for this battle.
The battle is the #SBFT23 fuzzing competition, and its winners will be crowned on 14 May 2023 in Melbourne, Australia.
Cube🧊 retweeted
Pleased to announce that the materials of Hypervisor 101 in Rust🦀is now public!
A one-day long course taught at #gccsec, to quickly learn hardware-assisted virtualization technology and its application for high-performance fuzzing on Intel/AMD processors
github.com/tandasat/Hypervis…
Cube🧊 retweeted
LibAFL QEMU full-system mode is a thing! Check out the example that fuzz a small ARM FreeRTOS firmware at github.com/AFLplusplus/LibAF…
Next step: fast memory and devices snapshots
Cube🧊 retweeted
Detect It Easy, or abbreviated "DIE" is a program for determining types of files.
3.06
github.com/horsicq/Detect-It…
#hacker #infosec #malware #hacking #programming #reversing #opensource #linux #linuxsecurity #unix #macos #detectiteasy #die #android #cybersecurity #detectiteasy
Cube🧊 retweeted
I just released the source code of Paracosme: a zero-click remote memory corruption exploit I demonstrated at Pwn2Own 2022 Miami 🐛🐜🪲
github.com/0vercl0k/paracosm…
Cube🧊 retweeted
LibAFL has now a dedicated paper! We discuss its design and show some experiments comparing compelling approaches. It will appear at CCS '22 this fall. Amazing collab with @domenuk @DongjiaZ @balzarot
Preprint at s3.eurecom.fr/docs/ccs22_fio…
@flibcocom you are deliberately ignoring my complains. Your job is to commute people from an airport to the other to *catch airplanes*. Your shuttle was 30min late, you didn't notified me about any delay. This is inadmissible and outrageous .
Cube🧊 retweeted
I've just discovered this amazing document showing super clearly the relation between the opcode and the instruction 🤯
pnx.tf/files/x86_opcode_stru…
Cube🧊 retweeted
I am very excited to announce that our talk:
New Memory Forensics Techniques to Defeat Device Monitoring Malware
was accepted at @BlackHatEvents Vegas!
blackhat.com/us-22/briefings…
@Volexity @volatility @nolaforensix @LSUCCT @lsuresearch
#BHUSA #DFIR