Alan Gay

Added a new interface to PANDA today which mostly recreates Unicorn Engine but with support for taint analysis (and all the other existing PANDA features). Might be time for a series of blog posts about using PANDA from python.

If you are into C++ reverse engineering and never tried OOAnalyzer you are missing out big time! https://insights.sei.cmu.edu/sei_blog/2019/07/using-ooanalyzer-to-reverse-engineer-object-oriented-code-with-ghidra.html …

Train with me and @infosectcbr to find bugs and vulnerabilities in C systems software https://blackhat.com/us-20/training/schedule/index.html#code-review-19126 …

Linux kernel 5.5 includes kcov extension that allows to collect code coverage from background kernel threads: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=eec028c9386ed1a692aa01a85b55952202b41619 …

New blogpost: Sanitized Emulation with QEMU-AddressSanitizer https://andreafioraldi.github.io/articles/2019/12/20/sanitized-emulation-with-qasan.html … I just open-sourced my QEMU patches to fuzz binaries with ASan, QASan. You can also use it with ARM targets on Linux, a thing that you can't do with LLVM ASan!

Anybody know of research that tries to reconstruct debugging symbols for a binary based on partially known C source? I am aware compilers will optimize out a lot, looking for ‘good enough’. Also, I can’t build the binary b/c missing parts of source. @moyix ?

Interested by QEMU intrusmentation / introspection ? Are you familiar with projects like - PANDA - DECAF - PyREBox Then you might want to have a look at this KVM Forum presentation: "Total System Awareness in TCG" by Alex Benée https://static.sched.com/hosted_files/kvmforum2019/ea/Total%20System%20Awareness%20in%20TCG.pdf …

I've now interviewed 12 engineers about the differences between traditional and software engineering. I learned a lot! I'm putting the interviews on pause while my Real Job gets in the way, so here's a sneak peek of some things I learned. How is software different from trad?https://twitter.com/hillelogram/status/1157004952268607492 …

Some cool work on data-flow #fuzzing from the CollAFL authors: "GREYONE: Data Flow Sensitive Fuzzing". Appearing in @USENIXSecurity '20: https://www.usenix.org/system/files/sec20spring_gan_prepub.pdf …

FirmFuzz, deep analysis of embedded firmware, fuzzing exposed web interfaces. This was extremely hard to publish (workshop instead of con) as reviewers wanted us to scale to 1000s of firmwares (darn you @aurelsec ) instead of deep analysis of a few http://nebelwelt.net/publications/files/19IOTSP.pdf …

It's a beautiful morning at Shonan, which means it's time to head into a conference room and listen to Patrice Godefroid's keynote about symbolic execution and fuzzing at Microsoft!

This is how long any prime factorization takes. Here, let me show you how.https://twitter.com/thepacketrat/status/1175017645097328640 …

A new article in my Linux heap corruption series by @infosectcbr. "Linux Heap glibc TCache Double Free Mitigation Bypass" http://blog.infosectcbr.com.au/2019/09/linux-heap-glibc-tcache-double-free.html …