I only really use laptops, and I use several throughout my various tasks. This leads to some synchronisation and authentication issues; maybe I need to develop on something that's on another machine, or I need to use SSH/GPG authentication to connect/sign to my version control system. I ended up working out how to...

This was a presentation offered during SBFT'23 to describe the LibAFL team's submissions to the fuzzing tool competition. Slides presented. Recording available on YouTube (starting at 4:45:08).

Available with paywall online from IEEE. Available online for free from AFL++ website. Source code available on the LibAFL GitHub.

Available with paywall online from IEEE. Available online for free from AFL++ website. Source code available on the LibAFL GitHub.

Available online for free from USENIX.

A two-part blog series posted on secret.club under the title: "Earn $200K by fuzzing for a weekend". Clickbait-y, yes, but I thought it was important to get people looking into differential fuzzing :) Part 1 details the process of developing the increasingly specialised fuzzers which targeted the Solana Berkeley...

Available with paywall online from IEEE. Available online for free from Yanze Li's website.

This was a project I did during my undergrad when I was still learning about where I wanted to go with my security research. As with many projects, this was not completed meaningfully. The text below is my hopeful, naïve self expecting to solve a hard formal analysis and reverse engineering problem. The subsequent...