lrngjcb

Joined 6 years ago

Karma

79

Submissions

31

Member since

Aug 4

View on Hacker News

Recent submissions

Weekly Fuzzing Newsletter – Fuzzing Weekly CW12 ioc.exchange

1 lrngjcb 3 years ago 0 comments

Researchers Discover Kill Switch' in Starlink Terminals – Fuzzing Weekly CW10 ioc.exchange

2 lrngjcb 3 years ago 0 comments

How to find arbitrary code execution vulnerabilities in Java with fuzz testing code-intelligence.com

2 lrngjcb 4 years ago 0 comments

Fuzzing Java to Find Log4j Vulnerability – CVE-2021-45046 youtube.com

1 lrngjcb 4 years ago 0 comments

Comment · 4 years ago

Hindsight is 20/20, but with a hook on javax.naming.Context#lookup and a generally useful improvement to the Map instrumentation, Jazzer reliably finds #log4j CVE-2021-44228 in ~5 min with a one-line fuzz target: log.error(data.consumeRemainingAsString());

https://github.com/CodeIntelligenceTesting/jazzer/pull/257

Finding the log4j RCE With Fuzzing code-intelligence.com

1 lrngjcb 4 years ago 1 comments

Comment · 5 years ago

I did my research. The paper is already published: https://publications.cispa.saarland/3463/1/roth2021usable.pd...

Angry Developers – A Qualitative Study on Developers’ Struggles with CSP fuzzcon.eu

1 lrngjcb 5 years ago 1 comments

Swisscom Startup Challenge: These are the 5 winners twitter.com

1 lrngjcb 5 years ago 0 comments

Comment · 5 years ago

Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

CVE in jsoup: users should upgrade to version 1.14.2 [CVSS 7.5] github.com

3 lrngjcb 5 years ago 1 comments

Comment · 5 years ago

Well, it's actually not that easy... :D

How to Fuzz Complex Microservices in 5 Easy Steps blog.code-intelligence.com

2 lrngjcb 5 years ago 1 comments