#FuzzingWeekly CW20:
This week’s theme is Back to Basics.

Fuzzing: The State of the Art - https://apps.dtic.mil/sti/pdfs/ADA558209.pdf

What is Fuzz Testing? - https://www.code-intelligence.com/what-is-fuzz-testing

Fuzzing 101: Tools and Exercises - https://github.com/antonio-morales/Fuzzing101

https://www.fuzztesting.io/fuzzing-weekly

#FuzzingWeekly CW17 - Here are some things you didn't know you could fuzz:

Fuzzing cURL
https://blog.trailofbits.com/2023/02/14/curl-audit-fuzzing-libcurl-command-line-interface/

Fuzzing Cars:
https://argus-sec.com/blog/cyber-security-blog/how-fuzzing-complements-penetration-testing-for-optimal-vehicle-cybersecurity/

Fuzzing KDL:
https://github.com/kdl-org/kdl/discussions/314

https://www.fuzztesting.io/fuzzing-weekly

#FuzzingWeekly CW10:

Researchers Discover 'Kill Switch' in Starlink Terminals With Fuzzing:
https://stigward.github.io/posts/fiio-m6-kernel-bug/

Security Vulnerabilities Detected, Which Reveals DJI Drone Operator's Exact Location:
https://www.eurekalert.org/news-releases/981456

Fuzzing an IDOR Vulnerability With ZAP:
https://www.youtube.com/watch?v=GAQd85oo6ZU

https://fuzztesting.io/fuzzing-weekly

#FuzzingWeekly CW 2:

These free tools for hacking are also good for application security ➡️
https://thestack.technology/free-fuzzing-tools-in-2023/

Fuzzing Hidden Directories & Files with Ffuf ➡️
https://blog.stealthsecurity.io/fuzzing-hidden-directories-files-with-ffuf/

Mozilla Disclosed 20 New CVEs Found With Fuzzing ➡️
https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&query=fuzzing&search_type=all&isCpeNameSearch=false&pub_start_date=12%2F22%2F2022&pub_end_date=01%2F22%2F2023

#fuzzing #security

#FuzzingWeekly CW 1:

Fuzzing is Cool, Actually ➡️
https://simplythetest.tumblr.com/post/705635085370687489/fuzzing-is-cool-actually

Incremental fuzzing of the admissible input space: a test framework #606➡️
https://github.com/DA0-DA0/dao-contracts/discussions/606

Fuzzing IDOR Vulnerability With ZAP!➡️
https://youtube.com/watch?v=GAQd85oo6ZU

#FuzzingWeekly CW 51

How Fuzzing Helped Me to Get My First Bounty ➡️
https://infosecwriteups.com/how-fuzzing-helps-me-to-get-my-first-bounty-2c63eb864e08

Hybrid fuzzing: Sharpening the spikes of Echidna ➡️
https://blog.trailofbits.com/2022/12/08/hybrid-echidna-fuzzing-optik-maat/

Effective Unit Testing for Java Applications: Common Challenges and Solutions ➡️
https://youtube.com/watch?v=rYSvBANQBB0&list=PLI0R_0_8-TV6ln6eVSptEJbmHgajVdj6n&index=3

#FuzzingWeekly CW 51

How Fuzzing Helped Me to Get My First Bounty ➡️
https://infosecwriteups.com/how-fuzzing-helps-me-to-get-my-first-bounty-2c63eb864e08

Hybrid fuzzing: Sharpening the spikes of Echidna ➡️
https://blog.trailofbits.com/2022/12/08/hybrid-echidna-fuzzing-optik-maat/

Effective Unit Testing for Java Applications: Common Challenges and Solutions ➡️
https://youtube.com/watch?v=rYSvBANQBB0&list=PLI0R_0_8-TV6ln6eVSptEJbmHgajVdj6n&index=3

#FuzzingWeekly CW 50

Understanding Fuzz Testing in Go ➡️ https://blog.jetbrains.com/go/2022/12/14/understanding-fuzz-testing-in-go/

Fuzzing Golang msgpack for fun and panic ➡️ https://redcanary.com/blog/fuzzing/

Finding JIT Optimizer Bugs using SMT Solvers and Fuzzing ➡️ https://pypy.org/posts/2022/12/jit-bug-finding-smt-fuzzing.html#

#fuzzing #softwaresecurity

RT @FuzzingWeekly@twitter.com

#FuzzingWeekly CW 49

Mind-Blowing examples of OpenAI ChatGPT for Hacking
https://www.youtube.com/watch?v=mh7wzbWAHFE

Fuzzing ping(8)... Finding a 24-year-old bug
https://tlakh.xyz/fuzzing-ping.html

A Compiler Fuzzer for Loop Optimizations and Data-Parallel Languages
https://www.youtube.com/watch?v=Yyj2Fex9yEo

@Pat_Ventuzelo@twitter.com

🐦🔗: https://twitter.com/FuzzingWeekly/status/1601167177502973952

#FuzzingWeekly CW 49

Mind-Blowing examples of OpenAI ChatGPT for Hacking
https://youtube.com/watch?v=mh7wzbWAHFE

Fuzzing ping(8)... Finding a 24-year-old bug
https://tlakh.xyz/fuzzing-ping.html

A Compiler Fuzzer for Loop Optimizations and Data-Parallel Languages
https://youtube.com/watch?v=Yyj2Fex9yEo

#FuzzingWeekly CW 48

Looking for Remote Code Execution bugs in the Linux kernel ➡️ https://xairy.io/articles/syzkaller-external-network

Introducing Afl-Ruby: fuzz your Ruby programs using afl ➡️ https://robertheaton.com/2019/02/16/introducing-afl-ruby/

Burp Suite: Fuzzing for Credentials ➡️
https://www.youtube.com/watch?v=MrWPpgUVf00

#FuzzingWeekly CW 47

Till REcollapse - Fuzzing the web for mysterious bugs: https://0xacb.com/2022/11/21/recollapse/

Comprehensive Guide to Testing in Go: https://blog.jetbrains.com/go/2022/11/22/comprehensive-guide-to-testing-in-go/

# Fuzzing JWT: https://sh1yo.art/post/fuzzing_jwt/