Michael Rodler

for some reason I like analyzing code; also 🤘 (he/him) also @[email protected]

[Marcel Böhme👨‍🔬 @mboehme_]

Looks like there is a new snapshot-based fuzzer in town. It's also super-well documented.

* https://t.co/CBb2QsRtsx
* https://t.co/i6YeF8Gtws

[Mike Hunhoff @mehunhoff]

🚨 Our latest #Ghidrathon release has out-of-box support for Python 3 modules that don’t support multiple Python sub-interpreters running in a single process. e.g. you can now use #PyO3 to run #Rust from #Python 3 from #Ghidra ��. Check it out https://t.co/T1z3igZ0ws

[Foundry Zero @FoundryZero]

For too long has it been a mild inconvenience to not have the features of GEF in LLDB.

We at Foundry Zero feel you deserve better!

So we ported GEF features to LLDB.

You're welcome.

Read about it here: https://t.co/ZZzGqXlzUX

Find it here:
https://t.co/xgkH84TIuA

[Sean McArthur @seanmonstar]

New #rustlang h2 release: v0.3.20 🦀

This includes several bug fixes found with additional fuzzing (thanks @f0rki!) Worth an upgrade.

https://t.co/eYV2qhBbAm

[⚡️🌙 @dystopiabreaker]

one day google is going to randomly kill 8.8.8.8 for no reason and a double digit percentage of the internet as well as major world governments will go down

[Jinsheng Ba @JinshengBa]

To avoid incomplete and incorrect citations in papers, I wrote a script to automatically correct BibTex files: https://t.co/7RJxSPQLYX

Just one click: `bibtidy --file "test.bib" --output test_checked.bib`!

[jubilee 🏳️‍🌈parody🏳️‍⚧️ @workingjubilee]

OnceCell is now STABLE, folks! https://t.co/jQ8QKrS8QZ

[Aurélien Francillon @aurelsec]

The summer school "Cyber in Sophia Antipolis" will take place from July 3rd to 7th
https://t.co/n4wCJVZ6jw
Topic is research on vulnerability discovery and exploitation.

[Michael Rodler @f0rki]

@PatrickAlphaC yes this is me. glad you like it. code is available here: https://t.co/OHeFH9kXeO

[Michaël Marcozzi 🇪🇺🇧🇪 @michaelmarcozzi]

🥁I am looking for students and postdocs:

PhD student // 3 years, fully funded // Fuzzing
https://t.co/7SkWN7RnaI

Postdoc // 3 years, fully funded // Complex software vulnerabilities
https://t.co/vzzjUaGTsC

[Michael Rodler @f0rki]

yeah @ctfhacker released it :D this is an awesome project (although I might be biased)

[Scott Piper @0xdabbad00]

AWS open-sourced a fuzzer. "load a raw memory dump and register state into a KVM virtual machine (VM) for execution. At a point in execution, this VM can be reset to its initial state" https://t.co/yHDO2MiYlz

[Kostya Serebryany @kayseesee]

Intel LAM support is merged to Linux upstream!
(LAM makes HWASAN possible, similar to Arm's top-byte-ignore)

https://t.co/wDADcuxOy4

[is-eqv.bsky.social @is_eqv]

Very cool to see this work finally getting published. Congratz @__nils_ :)

[Marcel Böhme👨‍🔬 @mboehme_]

On finding 0days with LLMs.

[vx-underground @vxunderground]

Today VirusTotal announced that each sample uploaded will be accompanied by "Code Insight". Code Insight uses Sec-PaLM, one of the generative AI models by Google, to explain what the malicious binary is doing.

Code Insight is available to all users.

tl;dr "they took my job"

[Mathieu Tarral @mtarral]

This is also the main fuzzer driving our initative to secure and harden the Linux kernel for Confidential Computing 🔐!

And it's all on Github ⭐️!

https://t.co/NzJafyYuse

(5/x)

[Michael Rodler @f0rki]

However, EF/CF also supports property-based fuzzing, looking for custom assertions/events, solidity panics in solc >0.8.

[Michael Rodler @f0rki]

Since the paper is now accepted, time to drop some code :) https://t.co/OHeFH9kXeO
a high perf fuzzer for #ethereum smart contracts based on AFL++, a custom evm2cpp transpiler, a modified eEVM runtime, and a custom mutator for TXs. Oh and it also creates reentrancy exploits.

[Michael Rodler @f0rki]

For example, EF/CF can actually synthesize an rentrancy exploit for the Uniswap/IMBTC incident. One just needs to configure EF/CF to fuzz all relevant contracts in combination.