Recent content in Ruebezahl's Dwellings on R9295's blog
TLDR: This article is an exploration of integrating three different languages to perform coverage guided, in-process differential fuzzing using LibAFL. Three approaches are attemped: Invoking as a command, embedding the interpreter and shared memory. Differential fuzzing is one of the most exciting forms of fuzzing. The essence is to test competing implementations of a library or an application…
Hello all, I am Aarnav, a security engineer. I primarily work on fuzzing. This includes building fuzzers, associated tooling and fuzzing harnesses for targets. Fuzzers Here are the fuzzers I've built Autarkie link Autarkie is a native grammar fuzzer built in Rust. Using procedural macros, it automatically creates a grammar fuzzer based on any Rust data structure. Autarkie is heavily inspired by…
Several supply chain attacks, notably in the Python and Javascript ecosystem, exploit install time hooks to perform malicious activity 1 2. Install time hooks allow running arbitray code before or after package installation. Since attacks utilizing install time hooks do not involve developers actually using the package, it makes them an attractive method for attackers. The most common behaviour…
Introduction Generative music is always fun and engaging, so I decided to build a simple MIDI sequencer to mess around. In this project, the sequencer sends a random note within a given octave every quarter bar (4/4) Because it’s so simple, the code provided will be very easy to extend as you please. See Bonus Setup project $ mkdir gen_seq $ cd gen_seq $ go mod init Sequencer $ touch main.