Rode0Day

A continuous bug finding competition

[Rode0Day @Rode0day]

@Toizi When I cloned the repo onto my Ubuntu 18.04 machine, your inputs weren’t causing it to crash. We include stdio.h to make some of our internal logging work- when I added that it did crash, not sure why. I couldn’t reproduce the crash on master branch though.

[Rode0Day @Rode0day]

Our next bug-finding rode0 will kick off in just under 30 minutes! To get started and prove how many bugs you can find, visit https://t.co/1BgONYAyE6

[Rode0Day @Rode0day]

@NeolexSecurity Hey, we’re a bit overwhelmed with other projects at the moment so we probably won’t be running a competition this month but we should have something ready for next month which will launch on April 1!

[Rode0Day @Rode0day]

After a longer-than-expected hiatus for a server migration Rode0day is back! Our February competition will start as scheduled tomorrow with some new buggy programs, made just for your enjoyment. Good luck, bug-finders!

[Rode0Day @Rode0day]

@microsvuln Sorry for the downtime, we had some issues while moving our servers. A new competition will be starting in just a few days

[Rode0Day @Rode0day]

We just pushed an update to the info.yaml file for October's bug-finding competition fixing incorrect paths to the jpegS4 and jqB3 challenges. Be sure to download the updated version of the corpus if you're competing!

[Dr Andrew Fasano @andrewfasano]

We (@moyix, @DynaWhat, and Tim Leek) wrote an article for @securityprivacy on "The @Rode0day to Less-Buggy Programs." Check it out here - https://t.co/lzmZpbKDBk

[Thuan Pham @thuanpv_]

Brendan @moyix just talked about Rode0day #fuzzing competition @shonanmtg. The challenge set includes many interesting targets and i think it could be a good benchmark for fuzzing evaluation.

[Rode0Day @Rode0day]

@andreafioraldi @andrewfasano If you tested it manually with the right args, then it’s probably not a bug in simple CRS or your fork. Let me know how your testing goes!

[Rode0Day @Rode0day]

During the 19.07 Rode0day, @DynaWhat rediscovered CVE-2019-8905 as a part of his 1.9 billion executions of file with AFL!

[Rode0Day @Rode0day]

In the 19.07 Rode0day we tried something a bit different. Instead of only injecting bugs that we had answers to, we injected trivial bugs in functions we were unable to get coverage of. Using the inputs teams sent us, we can now inject bugs into new parts of these targets!

[Rode0Day @Rode0day]

Our latest bug-finding rode0 has begun! Good luck bug-finders https://t.co/ZCfQEDnDWa

[Dr Andrew Fasano @andrewfasano]

It's been one year since we launched our continuous bug-finding competition, @Rode0day! We've spent the past year learning all we can about bugs and bug-finding and tomorrow morning, I'll be presenting some of what we've found at #woot19 https://t.co/NaVW6OY2Tv

[Rode0Day @Rode0day]

There are still many undiscovered bugs in this month's bug-finding rodeo so we've pushed back the end date. Good luck bug-finders!

[Rode0Day @Rode0day]

Our July Rode0day featuring buggy versions of sqlite, libjpeg, file, jq, and tinyexpr has begun! Our bugs this month are a bit different from usual. Think you can find them? Join the competition at https://t.co/1BgONYAyE6

[Rode0Day @Rode0day]

Our July Rode0day featuring buggy versions of sqlite, libjpeg, file, jq, and tinyexpr has begun! Our bugs this month are a bit different from usual. Think you can find them? Join the competition at https://t.co/1BgONYAyE6

[Rode0Day @Rode0day]

It's time to dust off your bug-finding systems- July's rode0day will launch tomorrow at 1700 UTC! The competition will feature some high quality bugs made just for your enjoyment.

[Rode0Day @Rode0day]

@MurmusCTF It will probably start next Wednesday and run for 2 weeks so we can get back on our regular schedule.

[Rode0Day @Rode0day]

Interested in joining our next bug-finding rodeo but don't know where to start? Check out this excellent video series from @MurmusCTF showing how to compete using AFL! https://t.co/u9IFjPVNJT

[Rode0Day @Rode0day]

And @MurmusCTF is now running a competition to triage some of his libjpeg crashes and write exploits for them. We're pretty sure many of these bugs are exploitable, so give it a try- https://t.co/JXrJOfgXbS. There are even prizes!