PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

USB Fuzzing Basics: From fuzzing to bug reporting

blog.quarkslab.com | research | #fuzzing | #windows | #vulnerability | #bug-reporting | #usb | #facedancer
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

USB fuzzing walkthrough with a Facedancer-based rig (capture/replay, Radamsa mutation): mutating the bNumEndpoints field of a mass-storage descriptor blue-screened a fully patched Windows 8.1 x64.
Published
Collected

Related coverage

research · blog.quarkslab.com
Hydradancer: Faster USB Emulation for Facedancer
Quarkslab releases Hydradancer, a HydraUSB3-based board bringing USB2 High-speed emulation to Facedancer for faster, more stable USB peripheral testing, detailing the RISC-V WCH569 challenges.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · eshard.com
Lite VM Studio builds your Windows VM, so you don't have to.
Eliminate Windows background noise in Time Travel Debugging. Discover how Lite VM Studio turns weeks of VM customisation into a single prompt for faster, cleaner TTD recordings.
Back