Ricerca Security

Offensive Security Professionals | VAPT, R&D, Consulting, Training | Recognized by government agencies, Fortune 500s | Japanese: @RicercaSec_JP

[Ricerca Security @RicercaSec]

We are thrilled to announce that our researcher Akira Moroo (@retrage) and CEO Ren Kimura (@RKX1209) will be speaking at HITCON CMT 2024 in Taiwan!

Title: Lessons Learned from a 4-Year Journey on Developing a Generic Fuzzing Framework

https://t.co/tMefcGbcNl

[Ricerca Security @RicercaSec]

In the final part of our Fuzzing Farm series, we provide technical analysis and a PoC for CVE-2022-24834, an RCE vulnerability in Redis we found.
While we reported it in 2022, the bug detail was disclosed last week. If you use Redis, patch it immediately.
https://t.co/9OAbK644xd

[Ricerca Security @RicercaSec]

This is part 3 of our Fuzzing Farm series.
Our team is also working on 1-day and 0-day exploits.
In this article, we explain the process of developing a Proof of Concept (PoC) for undisclosed bugs, using a CVE of Google Chrome as an example.
https://t.co/OBLlNQ7gfu

[Ricerca Security @RicercaSec]

This is part 2 of our Fuzzing Farm series. Our team is not only working to develop and utilize fuzzers, but also to evaluate and improve them.
In this article, we discuss some pitfalls and insights when evaluating fuzzers.
https://t.co/GTWfOtfbJE

[Ricerca Security @RicercaSec]

Our Fuzzing Farm team is developing and utilizing fuzzers. We will be sharing their work over the next 4 blog posts, starting this week.
The first post covers how to find bugs and identify their root cause through fuzzing.
https://t.co/veh7hYzF9C

[Ricerca Security @RicercaSec]

We will be publishing an English version of the technical series "Fuzzing Farm," which was well-received in Japanese. The series will be released from this week to next week.
The final day will feature a technical article explaining the exploitation of CVE-2022-24834. Stay tuned!

[Ricerca Security @RicercaSec]

We have reported an RCE vulnerability in Redis, which is assigned as CVE-2022-24834. The patch was released yesterday and we recommend applying it promptly. We will be publishing the writeup and PoC next week. Stay tuned! https://t.co/zOldlQJXck

[Ricerca Security @RicercaSec]

The qualifying round for DEF CON CTF, the world's largest hacking competition, took place last month.
For the second year in a row, the team with our company staffs qualified for the finals, placing 11th out of 535 teams worldwide (1st in Japan).

[Ricerca Security @RicercaSec]

🏁Ricerca CTF 2023 has just ended🏁

#RicercaCTF 2023 is over! Thank you for your playing

[Ricerca Security @RicercaSec]

🚩Ricerca CTF 2023 🚩
6 hours past since the start.
6 hours to go. #RicercaCTF

Registration is still open. Visit https://t.co/y78HU6jNSm to play the CTF.

[Ricerca Security @RicercaSec]

🚩Ricerca CTF 2023 has just started🚩

#RicercaCTF 2023 runs for 12 hours and ends at Apr 22 (Sat) 13:00 UTC.

Visit https://t.co/Pp57Oq9zFq to play the CTF.

[Ricerca Security @RicercaSec]

🚩Ricerca CTF 2023 registration is open🚩

We’ve just opened the registration for #RicercaCTF 2023 which starts tomorrow, Apr 22 (Sat) 01:00 UTC.
Visit https://t.co/y78HU6jNSm to play the CTF.

Challenges with a wide range of difficulty from rev, pwn, crypto, web, etc.

[Ricerca Security @RicercaSec]

🚩Ricerca CTF 2023 website is now available🚩

The website of #RicercaCTF is now open.
We are also proud to announce the authors.

The event will take place next weekend: Sat, April 22, 2023.
Registration will be open soon.

Visit https://t.co/y78HU6jg2O for more information.

[Ricerca Security @RicercaSec]

Our RCABench papers, presentation slides, and code are now publicly available!

https://t.co/mmCvAyKusd

[Ricerca Security @RicercaSec]

Our paper "RCABench: Open Benchmarking Platform for Root Cause Analysis" has been accepted at the NDSS BAR 2023 workshop!

[Ricerca Security @RicercaSec]

Our SLOPT paper is now open access & the repository is also publicly available!

https://t.co/NB4OdiVY2S
https://t.co/osRlIJDPzC

[Ricerca Security @RicercaSec]

Our paper "SLOPT: Bandit Optimization Framework for Mutation-Based Fuzzing" has been accepted at the ACSAC 2022 @ACSAC_Conf !

[Ricerca Security @RicercaSec]

🦾 Our cybersecurity training is released 🦾
Participants can learn vulnerability analysis and exploit techniques, targeting everything from simple programs to kernel drivers.
Customized training is also available.
Visit https://t.co/gL67eoZJm7 for more information.

[Ricerca Security @RicercaSec]

We are honored to receive the best paper at #NDSS2023 #bar2023 ! Huge thanks to all the R&D teams involved in RCABench.
https://t.co/TRarxfK5W8

[Aravind Machiry @machiry_msidc]

Best paper award for RCABench #bar2023 #NDSS2023 (@snagycs)

[Ricerca Security @RicercaSec]

Our paper "RCABench: Open Benchmarking Platform for Root Cause Analysis" has been accepted at the NDSS BAR 2023 workshop!

[Ricerca Security @RicercaSec]

#RicercaCTF 2023 will be held on Saturday, April 22, 2023. The event will last 12 hours from 10:00 to 22:00 JST.
We will announce details in April on CTFtime and Ricerca Security's official Twitter account.
https://t.co/O8wkBPrgvy

[Ricerca Security @RicercaSec]

The denial-of-service (DoS) vulnerability in tdpServer of TP-Link RE300 V1 (CVE-2022-41783) that was reported by our security engineer has been disclosed.
Please visit https://t.co/9HUcPreiiS for more information.