Sshafouzinshafouz.hashnode.dev·Nov 2, 2023 · 4 min readhow does afl flips bits?I found this code while looking at AFL++ code and was curious to know how it worked #define FLIP_BIT(_ar, _b) \ do { \ \ u8 *_arf = (u8 *)(_ar); ...00
Sshafouzinshafouz.hashnode.dev·Aug 21, 2023 · 6 min readRediscovering CVE-2023-36617 (ruby ReDoS) with fuzzingsummary CVE-2023-36617 Two ReDoS bugs existed in the Ruby uri module. Both bugs cause the program to hang and eventually throw a URI::InvalidURIError error. They affect version v0.12.2 of the gem. The commit has some tests that help understand what w...00
Sshafouzinshafouz.hashnode.dev·Mar 16, 2023 · 5 min readhxp 2022 - archivedarchived chall: archived by sandr0 difficulty: easy description: I’m using this super secure big company open source software, what could go wrong? Two credentials are provided, admin and regular user. The challenge consists of a server and an a...00
Sshafouzinshafouz.hashnode.dev·Jan 11, 2023 · 5 min readSolving pwnable's - orw - 2/???https://pwnable.tw The challenge description says: Only open read write syscalls are allowed to use. But is that enforced? How? Seccomp Taking a look using the ghidra decompiler: void orw_seccomp(void) { int iVar1; undefined4 *puVar2; undefined...00
