PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PASTIS For The Win!

blog.quarkslab.com | research | #open-source | #fuzzing | #symbolic-execution | #ensemble-fuzzing | #tool | #triton
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

PASTIS, a Quarkslab framework combining grey-box and white-box fuzzing, won a Google-sponsored SBFT bug-discovery competition and is released as open source under Apache 2.0.
Published
Collected

Related coverage

research · blog.quarkslab.com
Introducing TritonDSE: A framework for dynamic symbolic execution in Python
Introducing TritonDSE, a Python library atop Triton for customizable dynamic symbolic execution: high-level program exploration primitives, hooks, and the base of PASTIS's white-box fuzzer.
research · blog.quarkslab.com
QBDI vs TritonDSE against a VM: who will be the fastest?
Quarkslab solves a custom-VM CTF challenge twice — with symbolic execution engine TritonDSE and instrumentation framework QBDI — and compares which approach gets to the solution fastest.
research · blog.quarkslab.com
Triton v0.8 and ARMv7: A Guideline for Adding New Architectures
A follow-up to the Triton v0.8 release explaining how ARMv7 support was added to the symbolic execution framework and outlining a guideline for integrating new architectures.
research · blog.quarkslab.com
Triton v0.8 is Released!
Triton v0.8 is released under Apache 2.0, bringing bug fixes and features: implicit concretization, new path predicate APIs, ARMv7 support and more, highlighted from a large changelog.
research · blog.quarkslab.com
Symbolic Deobfuscation: From Virtualized Code Back to the Original (DIMVA 2018)
A micro-post on joint research with CEA and VERIMAG (DIMVA 2018): symbolically deobfuscating virtualized hash functions by tainting VM inputs and concretizing unrelated instructions.
research · blog.quarkslab.com
Mistreating Triton
Experiments that mistreat the Triton concolic-execution framework with forged C programs: unsupported vector instructions, orchestrated forks and inflated path counts to challenge its CFG recovery.
Back