Fuzzing Courses and Certifications

IEEE

Angora - Efficient Fuzzing by Principled Search

Innovative fuzzing technique combining mutation-based speed with high-quality input generation, outperforming existing fuzzers in bug detection and branch coverage through advanced constraint-solving methods.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

IEEE

A Fuzzing and Protocol Analysis Case-Study of DNP3

Explores vulnerabilities in DNP3, a key SCADA protocol for power systems, revealing design flaws and implementation gaps. Discusses fuzzing results, CVEs, and analyzes the protocol's security addendum.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

nullcon

Fuzzing Embedded - Trusted Operating Systems Using AFL

Explore fuzzing techniques for Trusted Execution Environments using AFL, focusing on OP-TEE. Learn about challenges, coverage tracking, and creating initial inputs for effective embedded system security testing.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Black Hat

Analyzing and Fuzzing for Qualcomm Hexagon Processor

Explore techniques for analyzing and fuzzing Qualcomm Hexagon processors, overcoming challenges in firmware analysis, emulation, and hardware-dependent targets for enhanced security research.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Black Hat

In-Field Emulation and Fuzzing of PLCs to Uncover the Next Zero-Day Threat in Industrial Control Systems

Explore innovative techniques for uncovering vulnerabilities in Industrial Control Systems through in-field emulation and fuzzing of PLCs, focusing on proactive security measures beyond network-level exploits.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

Hey, Your Parcel Looks Bad - Fuzzing and Exploiting Parcelization Vulnerabilities in Android

Explore Android's Binder IPC vulnerabilities through fuzzing and exploitation techniques. Learn to identify, analyze, and exploit "BadParcel" issues for privilege escalation in high-privilege processes.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

Fuzzing Android - A Recipe for Uncovering Vulnerabilities Inside System Components in Android

Explore a fuzzing approach to uncover vulnerabilities in Android's core system components. Learn about data generation, test execution, logging, and triage mechanisms for effective vulnerability detection.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Black Hat

Optimized Fuzzing IOKit in iOS

Optimized fuzzing approach for iOS IOKit interfaces, dynamically resolving symbols and parameters to improve efficiency and effectiveness in vulnerability discovery.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Black Hat

Catch Me If You Can - Deterministic Discovery of Race Conditions with Fuzzing

Novel fuzzing approach for deterministic discovery of race condition bugs, enabling researchers to unearth and root cause serious concurrency issues while maintaining an enjoyable process.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Black Hat

Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit

Explore coverage-based fuzzing of RDP client virtual channels, targeting complex functionalities like Sound, Graphics, USB, and Filesystem to uncover potential vulnerabilities and crashes.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Fuzzing Javascript Engines for Fun and Pwnage

Discover methods for finding vulnerabilities in Javascript Engines through fuzzing techniques, including crash classification, parallel fuzzing, and custom pattern generation for enhanced web browser security.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

A New Fuzzing Method for Android

Innovative Android fuzzing method combining function points to find vulnerabilities. Proven effective with 50+ bugs discovered on major OEM devices, inspiring new approaches in mobile security research.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Black Hat

ClusterFuzz - Fuzzing at Google Scale

Explore Google's massive fuzzing infrastructure, ClusterFuzz, and learn how it finds thousands of security vulnerabilities across Google products and open-source projects.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

nullcon

SMS to Meterpreter - Fuzzing USB Modems

Explore innovative attacks on USB data modems, including fuzzing techniques and SMS payload execution. Learn about vulnerabilities, reverse engineering, and USB sniffing for offensive security research.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

High Performance Fuzzing

Explore advanced fuzzing techniques for enhanced software security, covering target selection, input generation, execution monitoring, and failure detection.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk