Curious about fuzzing but don't know where to start? I wrote my first blog post on how to choose your target, build an AFL++-compatible harness, and avoid common pitfalls.
Check it out:
gabe-sherman.github.io/2025-09-17-b...
@gabriel-sherman.bsky.social
Ph.D. Student at the University of Utah | Computer Security https://gabe-sherman.github.io/
Curious about fuzzing but don't know where to start? I wrote my first blog post on how to choose your target, build an AFL++-compatible harness, and avoid common pitfalls.
Check it out:
gabe-sherman.github.io/2025-09-17-b...
Check it out!
📄 Paper: futures.cs.utah.edu/papers/25ATC.pdf
🛠️ Bin2Wrong: github.com/FuturesLab/Bin2Wrong
💥Some impacts of bugs Bin2Wrong found: binary.ninja/2024/06/19/restructuring-the-decompiler.html
#fuzzing #decompilation
OGHarn mutationally generates harnesses and uses 3 oracles of behavior to determine both their utility and validity, leading to the discovery of 41 new bugs(with zero false-positive crashes)!
Paper: futures.cs.utah.edu/papers/25ICS...
Source: github.com/FuturesLab/O...
Happy Fuzzing! 🐛
Need a fuzzing harness? No time to write one? Tired of false-positives? Let OGHarn lead the way to bug discovery!🐞
I'm excited to share my paper(with @snagycs.bsky.social)"No Harness, No Problem: Oracle-guided Harnessing for Auto-generating C API Fuzzing Harnesses" at @icseconf.bsky.social 2025!