@pnolsec

IT-Security Consultant and musician

 Bochum, Germany
Joined March 2020
  • Tweets17
  • Following56
  • Followers62
After the log4shell vulnerability was patched with version 2.15, another CVE was assigned. Let's have a closer look at the localhost JNDI connections bypass and learn about fuzzing Java applications. youtube.com/watch?v=kvREvOvS…
1
27
5
131
Daniel Teuchert retweeted
Khaled Yakdan@KhaledYakdan3 Feb 2022
An excellent example of differential fuzzing using jazzer!
LiveOverflow 🔴 hextree.io
@LiveOverflow1 Feb 2022
After the log4shell vulnerability was patched with version 2.15, another CVE was assigned. Let's have a closer look at the localhost JNDI connections bypass and learn about fuzzing Java applications. youtube.com/watch?v=kvREvOvS…
3
19
Daniel Teuchert retweeted
Code Intelligence@CI_Fuzz21 Oct 2021
+++ FuzzCon Europe 2021 Thread +++ We will keep you updated in the thread below. Stay tuned✌️ Starting at 4:00 PM (CET) Join the stream: fuzzcon.eu/2021/#registratio… #security #applicationsecurity #conference
1
7
2
12
Daniel Teuchert retweeted
SEC Consult@sec_consult19 Aug 2021
Multiple PLCs by Altus S.A. (rebranded by Beijer Electronics) are prone to different vulnerabilities. r.sec-consult.com/altus An attacker can gain full system level access on the PLCs without prior authentication @BeijerTR @pnolsec #infosec #iiot
3
1
3
Daniel Teuchert retweeted
is-eqv.bsky.social@is_eqv4 Aug 2021
Super cool to see more work building on top of kAFL! We will soon present very similar research (though with snapshots): usenix.org/conference/usenix…
Ophir Harpaz@OphirHarpaz4 Aug 2021
Our @BlackHatEvents talk is over (and went great!) and now's a good time to share everything about our research! Our research process is detailed in this blog post, go give it a read and let @peleghd and I know if you have any questions & thoughts! guardicore.com/labs/hafl1-ou…
2
16
Daniel Teuchert retweeted
Code Intelligence@CI_Fuzz22 Jun 2021
Join our live coding session: @pnolsec will demonstrate an automated mocking approach that will instantly improve your code coverage and protect your embedded software against unexpected edge cases. page.code-intelligence.com/m…
4
17
Daniel Teuchert retweeted
Code Intelligence@CI_Fuzz29 Apr 2021
Last chance to sign up for today's live hacking session! You cannot attend? No problem. Make sure to get the recordings: code-intelligence.com/automo…
3
1
Daniel Teuchert retweeted
Khaled Yakdan@KhaledYakdan29 Apr 2021
Blog post by @pnolsec on fuzzing embedded software. Daniel also presents an approach to automatically generate fuzz tests in these scenarios.
Code Intelligence@CI_Fuzz28 Apr 2021
What are the challenges in fuzzing embedded systems with hardware dependencies, and how can we overcome them with fuzzing and mock data? Read: blog.code-intelligence.com/a… #embedded #security #securitytesting #ISO21434
2
4
Daniel Teuchert retweeted
Code Intelligence@CI_Fuzz26 Apr 2021
Live hacking session: Testing embedded systems with dependencies. This Thursday (29.04.), @pnolsec will demonstrate how to automate and improve security testing for #automotive systems. Interested? code-intelligence.com/automo… #fuzzing #embedded #cpp
1
6
12
Daniel Teuchert retweeted
Code Intelligence@CI_Fuzz15 Apr 2021
Join our live-coding session: @pnolsec will demonstrate a new #fuzzing approach, that will instantly improve your code coverage. code-intelligence.com/webina…
1
4
Daniel Teuchert retweeted
heise Developer@heisedc11 Mar 2021
Testing: Google integriert deutschen Jazzer in OSS-Fuzz heise.de/news/Testing-Google… #CodeIntelligence #Codeanalyse

Testing: Google integriert deutschen Jazzer in OSS-Fuzz

Das Projekt zum Abklopfen von Open-Source-Software auf Schwachstellen testet neuerdings JVM-Anwendungen mit dem Fuzzer von Code Intelligence.

heise.de
6
6
Daniel Teuchert retweeted
SEC Consult@sec_consult8 Oct 2020
Multiple Confluence Plugins are affected by stored #XSS vulnerabilities r.sec-consult.com/con allowing to inject malicious JavaScript code into #Confluence pages. #atlassian #infosec @avono_ag @RefinedSoftware @ServiceRocket @akeles_cs @AptisGmbh via @pnolsec @rferdigg
3
4
Daniel Teuchert retweeted
is-eqv.bsky.social@is_eqv29 Mar 2020
Together with @pnolsec and @ms_s3c we just published version 2.0 of Nautilus, our grammar fuzzer. It's now compatible w AFL++, can fuzz binary only targets, supports binary formats and scripting for non context free grammars & much more. Get it at: github.com/nautilus-fuzz/nau…
4
92
2
266
Daniel Teuchert retweeted
Abhishek Arya
@infernosec2 Mar 2020
After a decade of fuzzing, we just launched FuzzBench, a fuzzer benchmarking platform to bridge the gap between academic fuzzing research and industry fuzzing engines (e.g libFuzzer, AFL, Honggfuzz). github.com/google/fuzzbench

GitHub - google/fuzzbench: FuzzBench - Fuzzer benchmarking as a service.

FuzzBench - Fuzzer benchmarking as a service. Contribute to google/fuzzbench development by creating an account on GitHub.

github.com
6
215
10
544
Daniel Teuchert retweeted
is-eqv.bsky.social@is_eqv18 Mar 2020
Blackhat uploaded @ms_s3c and my talk "What the Fuzz" youtu.be/Wy7qY5ms3qY
20
4
53
Daniel Teuchert retweeted
Adrian Herrera@0xadr1an21 Jul 2019
I gave the Nautilus fuzzer a spin on QuickJS for fun. Super easy to run. Also effective compared to AFL (unsurprising, and admittedly my seeds probably weren't great). Many of these appear to be memory leaks (forgot to set detect_leaks=0, a la AFL), but some are more interesting
2
14
1
49
Daniel Teuchert retweeted
Parker Thompson@m0thran5 Dec 2019
Replying to @HushCon
@HushCon con this Saturday Patrick and I will be talking about our new fuzzer! We build a fuzzer that can detect new inputs to a target and automatically fuzz them, all without any manual harnessing required. We also have tons of cool data to show off. Here is a sample: 1/n
3
38
3
93
Load more