Earn $200K by fuzzing for a weekend: Part 1 | secret club
By applying well-known fuzzing techniques to a popular target, I found several bugs that in total yielded over $200K in bounties. In this article I will demonstrate how powerful fuzzing can be when applied to software which has not yet faced sufficient testing.
Earn $200K by fuzzing for a weekend: Part 1 addison May 11, 2022 By applying well-known fuzzing techniques to a popular target, I found several bugs that in total yielded over $200K in bounties. In this article I will demonstrate how powerful fuzzing can be when applied to software which has not yet faced sufficient testing. If you’re here just for the bug disclosures, see Part 2 , though I encourage you all, even those who have not yet tried their hand at fuzzing, to read through this. Exposition A few friends and I ran a little Discord server (now a Matrix space) which in which we discussed
saved by
related reading
- Finding Miscompiles for Fun, Not Profit - by Justin Lebarnewsletter.semianalysis.com
- Vulnerability Research Is Cooked - Quarrelsomesockpuppet.org
- A half-hour to learn Rustfasterthanli.me
- Exploiting the Profanity Flaw. On 20 Sep 2022, a tweet indicated that… | by Amber Group | Amber Group | Mediummedium.com
- All my favorite tracing tools: eBPF, QEMU, Perfetto, new ones I built and more - Tristan Humethume.ca
- Zenbleedlock.cmpxchg8b.com
- GitHub - antonio-morales/Fuzzing101: An step by step fuzzing tutorial. A GitHub Security Lab initiative · GitHubgithub.com
- Astra for Coding: Why Are We Doing This Again?lucumr.pocoo.org
- Ralph Wiggum as a "software engineer"ghuntley.com
- php situation is insaneyoutube.com
- From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code - Project Zerogoogleprojectzero.blogspot.com
- The Great Refactor | IFPifp.org