PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing a new section on snapshot fuzzing for kernel-level testing in the Testing Handbook

blog.trailofbits.com | blog | #fuzzing | #kernel | #trail-of-bits | #testing-handbook | #snapshot-fuzzing | #driver | #antivirus
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits added a snapshot fuzzing section to its Testing Handbook, showing how captured system state enables fast, deterministic testing of kernels, drivers, and antivirus software.
Published
Collected

Related coverage

blog · projectzero.google
A year of Windows kernel font fuzzing #2: the techniques
Second part of a series on a year-long fuzzing effort against the Windows kernel font engine, detailing the techniques and design decisions that made the project effective.
blog · projectzero.google
A year of Windows kernel font fuzzing #1: the results
Part one of a series on a year of at-scale fuzzing that found 16 vulnerabilities in Windows kernel TrueType and OpenType font handling, presenting results and bug collision case studies.
blog · projectzero.google
Kaspersky: Mo Unpackers, Mo Problems.
Applying Google-scale fuzzing techniques to antivirus software, a vast and highly privileged attack surface, with Kaspersky as the initial target of the research.
vulnerability · projectzero.google
Exploiting the Linux kernel via packet sockets
A guest post describing CVE-2017-7308, a signedness bug in Linux packet sockets leading to a heap out-of-bounds write and local privilege escalation, found via syzkaller.
blog · blog.trailofbits.com
Your AI agent fixed the bug, but what else did it change?
We’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate patch development and regression checks to agents.
blog · blog.trailofbits.com
Auditing in the age of (good enough) AI
Trail of Bits explains how agents built tooling and a Lean model for the Miden zkVM audit, finding a flaw enabling Falcon signature forgery and yielding 95 machine-checked proofs.
Back