Cube🧊

💻 Vulnerability research, fuzzing, reverse engineering
🚐 Travelling the world with a van
🤘🏻 Metal music supporter

[Florian Roth ⚡️ @cyb3rops]

Low-effort people are basically walking into a buzzsaw

https://t.co/5gyzYeJU6Y

[mhackeroni @mhackeroni]

End of day 1: the mhackeroni kitchen is in full swing @defcon CTF - let's cook 🔥

Thanks for the support to

🥇 #7Layers - #DRIVESEC

🥈 @_revng - @KeylessTech - @WuerthPhoenix - @CNIT_TLC

🙌 #STACKBITS

[Cube🧊 @cube0x8]

@elonmusk I went to buy one in Rome in March but they were all burning

[dmnk.bsky.social @domenuk]

Drop by everyone 🦥

[Rich Warren @buffaloverflow]

I know it’d be a bloodbath, but I’d love to see a pwn2own category for so-called security appliances

[Tavis Ormandy @taviso]

Neat, Intel awarded a $5k bug bounty for this report! We donated it to local food bank @2ndharvest, just in time for Christmas! Thank you!! 🎅

[Cube🧊 @cube0x8]

@andreafioraldi Congratulations!

[Jordan Whitehead @jordan9001]

I turned a workshop on fuzzing with LibAFL into a blog post for you all, check it out:
https://t.co/tGW5tjpt2q

[Cube🧊 @cube0x8]

@domenuk @bookingcom Who knows how much money goes to the taxi driver and how much to booking. In any case, it says "free cancellation," so if I were you, I would make the payment just to make them believe it, and then I would cancel it (not true, I wouldn't actually do it).

[dmnk.bsky.social @domenuk]

Emulated full system snapshot fuzzing by Intel 👀
https://t.co/seuAMcecTs

[Ben Hawkes @benhawkes]

"How to Build a Fuzzing Corpus" introduces some of the basic theory behind using a seed corpus for fuzzing, and answers three key questions: what is a seed corpus, why are they useful, and how can we build one from scratch? https://t.co/EGh4jcALGF

[lukas seidel @pr0me]

Our work on exploring new ways for efficient firmware fuzzing will be published at @USENIXSecurity 2023!

With SAFIREFUZZ, we introduce near-native rehosting, drastically improving the performance of fuzzing embedded targets.

Super happy about this work w @domenuk @nSinusR

[DonggeLiu @dongge_liu]

* The 8 new fuzzers are: AFL+++, AFLrustrust, AFLsmart++, HasteFuzz, LearnPerfFuzz, LibAFL_libFuzzer , Pastis, and symsan.
** The 4 baseline fuzzers are: AFL, AFL++, HonggFuzz, and libFuzzer.
They are evaluated by #FuzzBench from Google Open Source Security Team (GOSST).

[Satoshi Tanda @standa_t]

Pleased to announce that the materials of Hypervisor 101 in Rust🦀is now public!

A one-day long course taught at #gccsec, to quickly learn hardware-assisted virtualization technology and its application for high-performance fuzzing on Intel/AMD processors
https://t.co/ywRR63pDFd

[Andrea Fioraldi @andreafioraldi]

LibAFL QEMU full-system mode is a thing! Check out the example that fuzz a small ARM FreeRTOS firmware at https://t.co/37ony4zZao

Next step: fast memory and devices snapshots

[Cube🧊 @cube0x8]

@kyREcon @taviso You might be right actually... it's been awhile and I don't remember very well how often I was charging it 😅

[Cube🧊 @cube0x8]

@kyREcon @taviso Yes, it depends on the usage and the type of smartwatch as well. They're not all the same. I go running, hiking, receive notifications etc. so yes I had to charge everyday. The phone I have to charge it anyway, so better I go with the casio gshock.

[Cube🧊 @cube0x8]

@peperunas I did it abd iy was a succrs!

[Cube🧊 @cube0x8]

@lcamtuf I tried to switch to smartwatches but couldn't...