Sergej Schumilo @ms_s3c

Security Researcher sh -c ‘﹤&$1’ schumilo.de Bochum, Germany Joined February 2014

Tweets

220
Followers

1K
Following

364
Likes

840

Thorsten Holz @thorstenholz

a year ago

Congratulations Dr. @m_u00d8! 🎉

11 3 50 10K 1

Download Image

📷We’re excited to announce the second training session for #TyphoonCon24: “Fuzzing & Attacking Deeply Embedded Devices” by Tobias Scharnowski (@ScepticCtf) & Marius Muench (@nSinusR). Learn more and register: eventbrite.com/e/typhooncon-2…

4 83 549 574K 218

Download Image

Moritz Schloegel @m_u00d8

2 years ago

Fuzzing is hard, evaluating fuzzing is harder 🔥 For our new @IEEESSP paper, we studied 150 fuzzing evals and found issues such as lackluster documentation, bad experiment setups, or questionable CVEs 📄 Paper mschloegel.me/paper/schloege… 🔧 Help us fix this github.com/fuzz-evaluator…

3 52 190 23K 74

Christian Holler @mozdeco

2 years ago

I know I'm late for Christmas presents but I've added dynamic instrumentation filtering to AFL++. You can now select which parts of the (llvmnative) instrumentation you want to use at runtime, without rebuilding: github.com/AFLplusplus/AF… #fuzzing

0 9 27 4K 5

h0mbre @h0mbre_

2 years ago

starting a new fuzzer project on the blog that is based on an old @gamozolabs idea. in the first post, we load a statically built Bochs emulator ELF into our fuzzer process and execute it. there is some code and the humble beginnings of a repo. lets gooo h0mbre.github.io/New_Fuzzer_Pro…

6 106 353 82K 131

Mathieu Tarral @mtarral

2 years ago

🚀 kAFL release v0.8 1⃣ New Linux tutorial based on the Damned Vulnerable Kernel Module (DVKM) by @hardik05 2⃣ Docs how to use the kAFL "agent.sh" and sharedir based workflow to fuzz Linux targets 3⃣ A simplified kAFL agent in the Linux kernel !

1 18 78 8K 29

Download Image

Mathieu Tarral @mtarral

2 years ago

It's been a while since I've given updates here, especially since I started at Intel one year ago ! I've taken over the maintainership of kAFL 🛠️🚀 kAFL is a HW assisted feedback fuzzer for x86 VMs ✨ github.com/IntelLabs/kAFL ⬇️ (1/x)

5 47 163 21K 39

Omar @byte_how

3 years ago

Every paper from them is gold. (@is_eqv, @ms_s3c, @mr_phrazer et al) Every. Single. One. nyx-fuzz.com/papers/

1 4 30 0 10

Christopher @Kharosx0

3 years ago

Nyx fuzzing a Windows x64 kernel driver w/ full-system snapshot fuzzing. Lots of components, but it works pretty well.

1 26 169 0 29

Download Image

dmnk.bsky.social @domenuk

4 years ago

We just released FitM, the Fuzzer in the Middle!🎉🎉 Together with @derpst3b, @JB_Liikt and @_mmunier we added snapshotting and a network emulator to qemuafl. It fuzzes multiple stages of client-server interactions independently. Paper @ BAR'22, Code here: github.com/FGSect/FitM

4 80 289 0 41

Download Gif

Richard Johnson @richinseattle

4 years ago

@expend20 @is_eqv @ms_s3c Here is Nyx backend powering the familiar AFL++ frontend. This is still using intelpt + full system snapshots and achieving similar to inlined source instrumentation performance.

0 4 25 0 2

Download Image

Richard Johnson @richinseattle

4 years ago

Full system, hypervisor accelerated, incremental snapshot fuzzing with Intel PT coverage engine enabling full protocol stateful fuzzing via Nyx-Net! Getting roughly 1000 exec/s/core on dnsmasq. This is followup work to kAFL/RedQueen. Kudos to the authors @is_eqv and @ms_s3c!

3 48 256 0 44

Download Image

Sergej Schumilo @ms_s3c

4 years ago

Want to fuzz complex targets with AFL++ and snapshots? @is_eqv and I now got you covered: there is a Nyx implementation for AFL++ available here github.com/nyx-fuzz/Nyx/b…

0 46 141 0 19

Thorsten Holz @thorstenholz

4 years ago

Except from the @MozillaSecurity Firefox Security Newsletter/FSN-2021-Q3 (wiki.mozilla.org/Firefox_Securi…): "Now, we have received and successfully evaluated a research prototype for fuzzing the IPC Layer. " - Congratulations @ms_s3c and @is_eqv!

1 8 36 0 1

Code Intelligence @CI_Fuzz

4 years ago

Remember when @ms_s3c and @is_eqv showed us how to fuzz Super Mario Bros. at FuzzCon Europe 2020? -> youtu.be/jkNao0SjBAA They just published the source code to their hypervisor-based snapshot fuzzer. Feel free to check it out! ->github.com/RUB-SysSec/nyx… #Fuzzing #SuperMario

Sergej Schumilo @ms_s3c

4 years ago

3 103 299 0 53

Download Gif

0 6 21 0 5

is-eqv.bsky.social @is_eqv

4 years ago

@ms_s3c @ms_s3c and I also just published the most recent version of the codebase here: nyx-fuzz.com (the homepage even has gifs, check it out!!!)

1 7 30 0 2

Sergej Schumilo @ms_s3c

4 years ago

Our (@is_eqv, Andrea Jemmett, @Bl4ckIc3 and @thorstenholz) paper on robust snapshot based network fuzzing has landed on ArXiv, check it out here: arxiv.org/abs/2111.03013

1 40 111 0 22

is-eqv.bsky.social @is_eqv

4 years ago

@ms_s3c and I just published the code of our snapshot based hypervisor fuzzer Nyx github.com/RUB-SysSec/Nyx. Paper and talk: usenix.org/conference/use…. Stay tuned for a much more polished version at nyx-fuzz.com

3 53 166 0 27

Download Image

is-eqv.bsky.social @is_eqv

4 years ago

sneak peak time! Stuff that @klautcomputing, @ms_s3c and I have been working on. What if your debugger has a fuzzing harness and can run the target 100s to 10000s of times per second? Why bother with breakpoints? Watch expressions get evaluated live as you type.

Rohan Padhye @moarbugs

5 years ago

1 0 4 0 0

3 9 56 0 2

Download Image

is-eqv.bsky.social @is_eqv

5 years ago

Turns out, libxdc is still by far the fastest PT decoder out there! Find more infos on why libxdc outperforms honeybee: github.com/nyx-fuzz/libxdc. Thanks to @ms_s3c for investigating this and to @ezhes_ for the fresh ideas and helping us understand the performance of honeybee!