Andrey Fedotov

Computer scientist, Ph.D.

[Andrey Fedotov @anfedotoff]

We implemented the rule engine in our eBPF-based security monitoring agent Bombini: https://t.co/kD80avQzAe
Rule evaluation is blazingly fast and works entirely in eBPF!
Check out the docs: https://t.co/TCA8M1U6OB

Contributions are welcome!
#ebpf #security #Kubernetes

[Cilium @ciliumproject]

🐝New Cilium Contributor🐝

The newest Cilium contributor is @anfedotoff

They helped add support for user mode stack traces in events.

https://t.co/ACIFlXGQPS

[The Hacker's Choice (@[email protected]) @hackerschoice]

The blog post about the libwebp vulnerability fuzzing is up, it explains how I set up the experiment, how the crash was found and why oss-fuzz was not able to find it: https://t.co/wuwK2Vj6VO #fuzzing @metzmanj

[The Hacker's Choice (@[email protected]) @hackerschoice]

As there is quite some interest about finding the libwebp bug with fuzzing, I will write a blog entry about this next week #fuzzing

[Andrey Fedotov @anfedotoff]

@domenuk @mihaimaruseac @GuidoVranken Another problem is that in opensource it is hard to find concolic tool that is good enough for real targets.

[Andrey Fedotov @anfedotoff]

@domenuk @mihaimaruseac @GuidoVranken For some targets concolic execution can provide fuzzing performance increase. For other targets you could get no effect, or even performance downgrade. I consider symbolic as some kind of "clever mutator", that sometimes might be useful.

[Andrey Fedotov @anfedotoff]

My talk about #casr at OFFZONE 2023!!!
Slides:
https://t.co/iXChrPv0pq
Video (in Russian):
https://t.co/A3wJ6m3eFL
#fuzzing

[Andrey Fedotov @anfedotoff]

CASR 2.7.0 is available!
https://t.co/u1kxRexjgu

[Alexey Vishnyakov @VishnyaSweet]

Simply deduplicate and create reports for #UndefinedBehaviorSanitizer warnings with Casr: casr-ubsan -i corpus -o out -- /fuzz_target @@

https://t.co/5OA6MaBpnT

#casr #defectdojo #vulnerabilitymanagement #VulnerabilityAssesment #AppSec #DevSecOps

[dmnk.bsky.social @domenuk]

Almost a year after my defense, my PhD thesis "Automated Security Testing of Unexplored Targets Through Feedback-Guided Fuzzing" is now archived on the university server 🎉
We fuzzed Nvidia drivers, tcp servers, basebands, WebAssembly, ..

Enjoy reading :)
https://t.co/aBHy2X74iP

[Alexey Vishnyakov @VishnyaSweet]

casr-dojo: upload new and unique #crash reports found by #fuzzing to @defectdojo vulnerability management system: https://t.co/aa1RDRIOzx

#casr #defectdojo #vulnerabilitymanagement #VulnerabilityAssesment #AppSec #DevSecOps #cpp #rust #go #python

[Andrey Fedotov @anfedotoff]

https://t.co/uPqN39esnI
#casr 2.6.0, what's new:
casr-libfuzzer tool for triaging crashes found by libFuzzer based fuzzers (C/C++/go-fuzz/Atheris)
kodama crate for clustering instead of python scipy
RISCV support
#fuzzing

[quarkslab @quarkslab]

Spice up your binary program analysis with TritonDSE !
A blog post by Christian Heitman and @RobinDavid1 introducing our framework for Dynamic Symbolic Execution in Python
#symexec #fuzzing #opensource

https://t.co/fay9SlKee7

[Andrey Fedotov @anfedotoff]

@mihaimaruseac I like to use Github wiki for tutorials related to Github projects.

[Mihai Maruseac @mihaimaruseac]

I wish tutorial articles would all have a date when they got published and last updated. Followed a tutorial which was not working, spent time trying to fix it and then found out the API has been changed in 2017

[Mathias Payer @gannimo]

As it turns out, compilers happily spill the index for indirect jumps through a jump table after bounds checking, creating a TOCTTOU race for arbitrary control-flow hijacking. Check out our @HexHiveEPFL @IEEESSP "WarpAttack" paper: https://t.co/hBYmGqeh0N

[Alexey Vishnyakov @VishnyaSweet]

casr-libfuzzer: triage crashes in C/C++/Go/Python code found by libFuzzer/Atheris/go-fuzz

casr-libfuzzer -o out -- /fuzz_target

https://t.co/WK4Ewx597O

#casr #fuzzing #libfuzzer #atheris #go #python #cpp

[Andrey Fedotov @anfedotoff]

https://t.co/T0DROqYK9Z
#casr 2.5.0, what's new:
#libcasr: library for crash triage, stacktrace parsing, severity estimation, and collecting crash reports.
Crash triaging for Go panics
AARCH64 support
#fuzzing

[Dmitry Vyukov @dvyukov]

Excited to present new(?) approach to #fuzzing where one doesn't need to write fuzz functions.
Wanna fuzz all binaries on github - no problem.
Just give the fuzzer binaries to test. No false positives & 100% fidelity.

Blender: whole-program fuzzing:
https://t.co/K0ZQw2L1As

[Andrey Fedotov @anfedotoff]

Very nice collection of publications about #fuzzing: https://t.co/QSrRNCy5AV