papers
Academic papers and articles that I read related to web hacking, fuzzing, etc. / 阅读过的Web安全方向、模糊测试方向的一些论文与阅读笔记
파일 탐색기
최종 버전 다운로드 (.zip)- Automatic_exploit_generation.md
- Automatic_exploit_generation.pdf
- evaluating fuzz testing.md
- evaluating fuzz testing.pdf
- Predicting vulnerable software components.md
- Predicting vulnerable software components.pdf
- Scheduling Black-box Mutational Fuzzing.md
- Scheduling Black-box Mutational Fuzzing.pdf
- Symbolic execution for software testing three decades later.md
- Symbolic execution for software testing three decades later.pdf
- Using Logic Programming to Recover C++ Classes and Methods from Compiled Executables.md
- Using Logic Programming to Recover C++ Classes and Methods from Compiled Executables.pdf
- virtio Towards a De-Facto Standard For Virtual IO Devices.pdf
- Opening Pandora's Box through ATFuzzer Dynamic Analysis of AT Interface for Android Smartphones.pdf
- Adaptive Grey-Box Fuzz-Testing with Thompson Sampling.pdf
- Attention Is All You Need.pdf
- building fast fuzzers.pdf
- Deep Reinforcement Fuzzing.md
- Deep Reinforcement Fuzzing.pdf
- FuzzerGym A Competitive Framework for Fuzzing.md
- FuzzerGym A Competitive Framework for Fuzzing.pdf
- fuzzing art, science and engineering.md
- fuzzing art, science and engineering.pdf
- Improving Grey-Box Fuzzing by Modeling Program Behavior.md
- Improving Grey-Box Fuzzing by Modeling Program Behavior.pdf
- Leveraging Textual Specifications for Grammar-based Fuzzing of Network Protocols.md
- Leveraging Textual Specifications for Grammar-based Fuzzing of Network Protocols.pdf
- neural machine translation inspired binary code similarity comparison beyond function pairs.pdf
- NEUZZ Efficient Fuzzing with Neural Program Learning.md
- NEUZZ Efficient Fuzzing with Neural Program Learning.pdf
- NEUZZ Efficient Fuzzing with Neural Program Smoothing.md
- NEUZZ Efficient Fuzzing with Neural Program Smoothing.pdf
- Not all bytes are equal Neural byte sieve for fuzzing.md
- Not all bytes are equal Neural byte sieve for fuzzing.pdf
- TensorFuzz Debugging Neural Networks with Coverage-GUided Fuzzing.md
- TensorFuzz Debugging Neural Networks with Coverage-GUided Fuzzing.pdf
- FairFuzz A Targeted Mutation Strategy for Increasing Greybox Fuzz Testing Coverage.md
- FairFuzz A Targeted Mutation Strategy for Increasing Greybox Fuzz Testing Coverage.pdf
- Learning-Guided Network Fuzzing for Testing Cyber-Physical System Defences.pdf
- BigFuzz Efficient Fuzz Testing for Data Analytics using Framework Abstraction.pdf
- A Feature-Oriented Corpus for Understanding, Evaluating and Improving Fuzz Testing.md
- A Feature-Oriented Corpus for Understanding, Evaluating and Improving Fuzz Testing.pdf
- Practical Side-Channel Attacks against WPA-TKIP.pdf
- PTrix Efficient Hardware-Assisted Fuzzing for COTS Binary.pdf
- ScriptProtect Mitigating UnsafeThird-Party JavaScript Practices.pdf
- Embedded Devices Security and Firmware Reverse Engineering.pdf
- Understanding The Attack Surface And Attack Resilience Of Project Spartans New EdgeHTML Rendering Engine.pdf
- Unicorn Next Generation CPU Emulator Framework.pdf
- 0-days & Mitigations： Roadways to Exploit and Secure Connected BMW Cars-ppt.pdf
- 0-days & Mitigations： Roadways to Exploit and Secure Connected BMW Cars.pdf
- All the 4G Modules Could be Hacked.pdf
- API-Induced SSRF How Apple Pay Scattered Vulnerabilities Across the Web.pdf
- Attack Surface as a Service.pdf
- Attacking And Defending The Microsoft Cloud.pdf
- Battle Of Windows Service A Silver Bullet To Discover File Privilege Escalation Bugs Automatically.pdf
- DevSecOps ：What, Why and How.pdf
- Dragonblood Attacking the Dragonfly Handshake of WPA3-ppt.pdf
- Dragonblood Attacking the Dragonfly Handshake of WPA3.md
- Dragonblood Attacking the Dragonfly Handshake of WPA3.pdf
- eu-19-Afek-Booting-The-iOS-Kernel-To-An-Interactive-Bash-Shell-On-QEMU.pdf
- Exploiting Qualcomm WLAN and Modem Over The Air-ppt.pdf
- Exploiting Qualcomm WLAN and Modem Over The Air.pdf
- HostSplit： Exploitable Antipatterns in Unicode Normalization-ppt.pdf
- HostSplit： Exploitable Antipatterns in Unicode Normalization.pdf
- HTTP Desync Attacks Smashing into the Cell Next Door.pdf
- I'm Unique, Just Like You Human Side-Channels and Their Implications for Security and Privacy.pdf
- Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs.md
- Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs.pdf
- Monsters In The Middleboxes Building Tools For Detecting HTTPS Interception.pdf
- Munoz SSO Wars The Token Menace-ppt.pdf
- Munoz SSO Wars The Token Menace.pdf
- Practical Approach to Automate the Discovery and Eradication of Open-Source Software Vulnerabilities at Scale.pdf
- The Enemy Within Modern Supply Chain Attacks.pdf
- BlueMaster Bypassing and Fixing Bluetooth-based Proximity Authentication.pdf
- Booting the iOS Kernel to an Interactive Bash Shell on QEMU ppt.pdf
- Booting the iOS Kernel to an Interactive Bash Shell on QEMU.pdf
- Chain of Fools An Exploration of Certificate Chain Validation Mishaps-ppt.pdf
- Chain of Fools An Exploration of Certificate Chain Validation Mishaps.pdf
- Far Sides of Java Remote Protocols.pdf
- Fatal Fury on ESP32 Time to Release Hardware Exploits.pdf
- First Contact - Vulnerabilities in Contactless Payments-ppt.pdf
- First Contact - Vulnerabilities in Contactless Payments.pdf
- Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit.pdf
- Going Beyond Coverage Guided Fuzzing With Structured Fuzzing.pdf
- Mobile Network Hacking, IP Edition.pdf
- New Exploit Technique In Java Deserialization Attack.pdf
- Practical Side-Channel Attacks Against WPA-TKIP-ppt.pdf
- Practical Side-Channel Attacks Against WPA-TKIP.pdf
- Reverse Engineering and Exploiting Builds in the Cloud.pdf
- Side Channel Attacks in 4G and 5G Cellular Networks.pdf
- Site Isolation Confining Untrustworthy Code in the Web Browser.pdf
- Sneak into Your Room Security Holes in the Integration and Management of Messaging Protocols on Commercial IoT Clouds.pdf
- About Directed Fuzzing and Use-After-Free How to Find Complex & Silent Bugs.pdf
- Block Hiding Process Memory Via Anti Forensic Techniques.pdf
- Decade Of The RATs Custom Chinese Linux Rootkits For Everyone.pdf
- Defending Containers Like A Ninja A Walk Through The Advanced Security Features Of Docker And Kubernetes.pdf
- Demystifying Modern Windows Rootkits.pdf
- Detecting Access Token Manipulation.pdf
- Discovering Hidden Properties to Attack the Node.js Ecosystem.pdf
- Emulating Samsungs Baseband For Security Testing.pdf
- Escaping Virtualized Containers.pdf
- Fooling Windows through Superfetch.pdf
- HTTP Request Smuggling In 2020 New Variants New Defenses And New Challenges wp.pdf
- HTTP Request Smuggling In 2020 New Variants New Defenses And New Challenges.pdf
- Mind Games Using Data to Solve for the Human Element.pdf
- NoJITsu Locking Down JavaScript Engines-wp.pdf
- NoJITsu Locking Down JavaScript Engines.pdf
- OTRazor Static Code Analysis for Vulnerability Discovery in Industrial Automation Scripts-wp.pdf
- OTRazor Static Code Analysis for Vulnerability Discovery in Industrial Automation Scripts.pdf
- Room for Escape Scribbling Outside the Lines of Template Security -slides.pdf
- Room for Escape Scribbling Outside the Lines of Template Security.pdf
- Routopsy Modern Routing Protocol Vulnerability Analysis and Exploitation.pdf
- Virtually Private Networks-wp.pdf
- Virtually Private Networks.pdf
- Web Cache Entanglement Novel Pathways to Poisoning-wp.pdf
- Web Cache Entanglement Novel Pathways to Poisoning.pdf
- When TLS Hacks You.pdf
- You have No Idea Who Sent that Email 18 Attacks on Email Sender Authentication-wp.pdf
- You have No Idea Who Sent that Email 18 Attacks on Email Sender Authentication.pdf
- A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms.pdf
- ALPACA Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication.pdf
- Another Road Leads to the Host From a Message to VM Escape on Nvidia vGPU.pdf
- Breaking the Isolation Cross-Account AWS Vulnerabilities.pdf
- Bypassing Windows Hello for Business and Pleasure.pdf
- Do You Speak My Language Make Static Analysis Engines Understand Each Other.pdf
- hAFL1 Our Journey of Fuzzing Hyper-V and Discovering a 0-Day.pdf
- Let's Attack Let's Encrypt.pdf
- Mobius Band Explore Hyper-V Attack Interface through Vulnerabilities Internals.pdf
- EU-21-Kettle-HTTP-The-Sequel-Is-Always-Worse-wp.pdf
- EU-21-Kettle-HTTP-The-Sequel-Is-Always-Worse.pdf
- EU-21-Shupeng-New-Ways-of-IPV6-Scanning.pdf
- Dynamic Process Isolation.pdf
- Remote Memory-Deduplication Attacks.pdf
- A Journey Into Fuzzing WebAssembly Virtual Machines.pdf
- A New Trend for the Blue Team - Using a Practical Symbolic Engine to Detect Evasive Forms of MalwareRansomware.pdf
- Another Way to Talk with Browser Exploiting Chrome at Network Layer.pdf
- Attacks From a New Front Door in 4G & 5G Mobile Networks.pdf
- Backdooring and Hijacking Azure AD Accounts by Abusing External Identities.pdf
- Better Privacy Through Offense How To Build a Privacy Red Team.pdf
- Blasting Event-Driven Cornucopia WMI-based User-Space Attacks Blind SIEMs and EDRs.pdf
- BrokenMesh New Attack Surfaces of Bluetooth Mesh.pdf
- Cautious A New Exploitation Method! No Pipe but as Nasty as Dirty Pipe.pdf
- Controlling the Source Abusing Source Code Management Systems.pdf
- Devils Are in the File Descriptors It Is Time To Catch Them All.pdf
- DirectX The New Hyper-V Attack Surface.pdf
- DNSSEC Downgrade Attacks.pdf
- Do Not Trust the ASA, Trojans!.pdf
- Don't Get Owned by Your Dependencies.pdf
- eBPF ELFs JMPing Through the Windows.pdf
- ElectroVolt Pwning Popular Desktop Apps While Uncovering New Attack Surface on Electron.pdf
- Elevating Kerberos to the Next Level.pdf
- Google Reimagined a Phone. It was Our Job to Red Team and Secure it.pdf
- IAM The One Who Knocks.pdf
- Kubernetes Privilege Escalation Container Escape == Cluster Admin.pdf
- Let's Dance in the Cache - Destabilizing Hash Table on Microsoft IIS.pdf
- New Memory Forensics Techniques to Defeat Device Monitoring Malware-wp.pdf
- New Memory Forensics Techniques to Defeat Device Monitoring Malware.pdf
- PISE Protocol Inference using Symbolic Execution and Automata Learning-wp.pdf
- PISE Protocol Inference using Symbolic Execution and Automata Learning.pdf
- Process Injection Breaking All macOS Security Layers With a Single Vulnerability.pdf
- Return to Sender - Detecting Kernel Exploits with eBPF.pdf
- Scaling the Security Researcher to Eliminate OSS Vulnerabilities Once and For All.pdf
- Stalloris RPKI Downgrade Attack.pdf
- The Battle Against the Billion-Scale Internet Underground Industry Advertising Fraud Detection and Defense.pdf
- The COW (Container On Windows) Who Escaped the Silo.pdf
- The Journey of Hunting In-the-Wild Windows LPE 0day.pdf
- To Flexibly Tame Kernel Execution With Onsite Analysis.pdf
- Trace Me if You Can Bypassing Linux Syscall Tracing.pdf
- Wasm VM Escape and RCE Vulnerabilities Have Been Found in New Way-wp.pdf
- Wasm VM Escape and RCE Vulnerabilities Have Been Found in New Way.pdf
- A Pain in the NAS Exploiting Cloud Connectivity to PWN Your NAS.pdf
- All Cops Are Broadcasting Breaking TETRA After Decades in the Shadows.pdf
- BingBang Hacking Bing.com (and much more) with Azure Active Directory.pdf
- Chained to Hit Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise Software slides.pdf
- Chained to Hit Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise Software.pdf
- Defender-Pretender When Windows Defender Updates Become a Security Risk.pdf
- MaginotDNS Attacking the Boundary of DNS Caching Protection.pdf
- Route to Bugs Analyzing the Security of BGP Message Parsing.pdf
- Second Breakfast Implicit and Mutation-Based Serialization Vulnerabilities in .NET wp.pdf
- Second Breakfast Implicit and Mutation-Based Serialization Vulnerabilities in .NET.pdf
- Smashing the State Machine The True Potential of Web Race Conditions slides.pdf
- Smashing the State Machine The True Potential of Web Race Conditions.pdf
- Weaponizing Plain Text ANSI Escape Sequences as a Forensic Nightmare.pdf
- Dont Trust The DOM Bypassing XSS Mitigations Via Script Gadgets.pdf
- Exposing Hidden Exploitable Behaviors In Programming Languages Using Differential Fuzzing.pdf
- HEIST HTTP Encrypted Information Can Be Stolen Through TCP Windows ppt.pdf
- HEIST HTTP Encrypted Information Can Be Stolen Through TCP Windows.pdf
- It's A PHP Unserialization Vulnerability Jim But Not As We Know It-wp.pdf
- It's A PHP Unserialization Vulnerability Jim But Not As We Know It.pdf
- Molinyawe-Shell-On-Earth-From-Browser-To-System-Compromise-wp.pdf
- Molinyawe-Shell-On-Earth-From-Browser-To-System-Compromise.md
- Molinyawe-Shell-On-Earth-From-Browser-To-System-Compromise.pdf
- Stone-Pixel-Perfect-Timing-Attacks-with-HTML5-WP.md
- Stone-Pixel-Perfect-Timing-Attacks-with-HTML5-WP.pdf
- the-power-of-pair-one-template-that-reveals-100-plus-uaf-ie-vulnerabilities.md
- the-power-of-pair-one-template-that-reveals-100-plus-uaf-ie-vulnerabilities.pdf
- WebAssembly-A-New-World-of-Native_Exploits-On-The-Web-wp.pdf
- Edge Type Confusion利用.pdf
- IDN Visual Security Deep Thinking.pdf
- Pass-the-Hash in Windows 10 39170.pdf
- Advanced_Lateral_Movement_on_Kubernetes_Cluster-CN.pdf
- Catch_Multiple_Zero-Days_Using_Sandbox-CN.pdf
- Data-driven_Intrusion_Detection_Solutions_in_Alibaba_Cloud-CN.pdf
- From_Dvr_to_See_Exploit_of_IoT_Device-CN.pdf
- How_to_Find_Twelve_Kernel_Information_Disclosure_Vulnerabilities_in_Three_Months-CN.pdf
- New_and_Effective_Methods_to_Probe_Vulnerabilities_in_Hardware_Devices-CN.pdf
- Overview_of_the_Latest_Windows_OS_Kernel_Exploits_Found_in_the_Wild-CN.pdf
- Tappan Zee (North) Bridge Mining Memory Accesses for Introspection.pdf
- Coverage-based Greybox Fuzzing as Markov Chain.md
- Coverage-based Greybox Fuzzing as Markov Chain.pdf
- Designing New Operating Primitives to Improve Fuzzing Performance.md
- Designing New Operating Primitives to Improve Fuzzing Performance.pdf
- Directed Greybox Fuzzing.md
- Directed Greybox Fuzzing.pdf
- SlowFuzz Automated Domain-Independent Detection of Algorithmic Complexity Vulnerabilities.pdf
- 1 Trillion Dollar Refund – How To Spoof PDF Signatures.pdf
- Charting the Attack Surface of Trigger-Action IoT Platforms.md
- Charting the Attack Surface of Trigger-Action IoT Platforms.pdf
- LibreCAN Automated CAN Message Translator.pdf
- Matryoshka fuzzing deeply nested branches.md
- Matryoshka fuzzing deeply nested branches.pdf
- Principled Unearthing of TCP Side Channel Vulnerabilities.md
- Principled Unearthing of TCP Side Channel Vulnerabilities.pdf
- Your Cache Has Fallen Cache-Poisoned Denial-of-Service Attack.md
- Your Cache Has Fallen Cache-Poisoned Denial-of-Service Attack.pdf
- Bypassing Tor Exit Blocking with Exit Bridge Onion Services.pdf
- CLAPS Client-Location-Aware Path Selection in Tor.pdf
- DNS Cache Poisoning Attack Reloaded Revolutions with Side Channels.pdf
- PMForce Systematically Analyzing postMessage Handlers at Scale.pdf
- SQUIRREL Testing Database Management Systems with Language Validity and Coverage Feedback.pdf
- The Cookie Hunter Automated Black-box Auditing for WebAuthentication and Authorization Flaws.pdf
- TrafficSliver Fighting Website Fingerprinting Attacks with Traffic Splitting.pdf
- Zombie Awakening Stealthy Hijacking of Active Domains through DNS Hosting Referral.pdf
- A formally verified configuration for Hardware Security Modules in the cloud.pdf
- All your credentials are belong to us On Insecure WPA2-Enterprise Configurations.pdf
- An In-Depth Symbolic Security Analysis of the ACME Standard.pdf
- Chunk-Level Password Guessing Towards Modeling Refined Password Composition Representations.pdf
- DNS Cache Poisoning Attack Resurrections with Side Channels.pdf
- ECMO Peripheral Transplantation to Rehost Embedded Linux Kernels.pdf
- Let's Downgrade Let's Encrypt.pdf
- New Directions in Automated Traffic Analysis.pdf
- Realtime Robust Malicious Traffic Detection via Frequency Domain Analysis.pdf
- SoFi Reflection-Augmented Fuzzing for JavaScript Engines.pdf
- Spinner Automated Dynamic Command Subsystem Perturbation.pdf
- T-Reqs HTTP Request Smuggling with Differential Fuzzing.pdf
- Towards Transparent and Stealthy Android OS Sandboxing via Customizable Container-Based Virtualization.pdf
- V-SHUTTLE Scalable and Semantics-Aware Hypervisor Virtual Device Fuzzing.pdf
- Alert Alchemy SOC Workflows and Decisions in the Management of NIDS Rules.pdf
- Black Ostrich Web Application Scanning with String Solvers.pdf
- Don't Leak Your Keys Understanding, Measuring, and Exploiting the AppSecret Leaks in Mini-Programs.pdf
- Finding All Cross-Site Needles in the DOM Stack A Comprehensive Methodology for the Automatic XS-Leak Detection in Web Browsers.pdf
- Lost along the Way Understanding and Mitigating Path-Misresolution Threats to Container Isolation.pdf
- Measuring Website Password Creation Policies At Scale.pdf
- Passive SSH key compromise via lattices.pdf
- PyRTFuzz Detecting Bugs in Python Runtimes via Two-Level Collaborative Fuzzing.pdf
- Silence is not Golden Disrupting the Load Balancing of Authoritative DNS Servers.pdf
- TsuKing Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers.pdf
- Understanding and Detecting Abused Image Hosting Modules as Malicious Services.pdf
- Whole-Program Control-Flow Path Attestation.pdf
- 25 Million flows later - Large-scale detection of DOM-based XSS - ppt.pdf
- 25 Million flows later - Large-scale detection of DOM-based XSS.pdf
- Block Oriented Programming Automating Data-Only Attacks.pdf
- Code-Reuse Attacks for the Web Breaking Cross-Site Scripting Mitigations via Script Gadgets - wp.md
- Code-Reuse Attacks for the Web Breaking Cross-Site Scripting Mitigations via Script Gadgets.md
- Code-Reuse Attacks for the Web Breaking Cross-Site Scripting Mitigations via Script Gadgets.pdf
- Deterministic Browser.md
- Deterministic Browser.pdf
- Hawkeye - towards a desired directed grey box fuzzer.md
- Hawkeye - towards a desired directed grey box fuzzer.pdf
- HyCC Compilation of Hybrid Protocols for Practical Secure Computation.pdf
- IMF Infeered Model-based Fuzzer.md
- IMF Infeered Model-based Fuzzer.pdf
- POISED Spotting Twitter Spam Off the Beaten Paths.pdf
- Predicting Impending Exposure to Malicious Content from User Behavior.md
- Predicting Impending Exposure to Malicious Content from User Behavior.pdf
- Rewriting History Changing the Archived Web from the Present.pdf
- Robust Website Fingerprinting Through the Cache Occupancy Channel.pdf
- SemFuzz Semantics-based Automatic Generation of Proof-of-Concept Exploits.pdf
- The TypTop System Personalized Typo-Tolerant Password Checking.md
- The TypTop System Personalized Typo-Tolerant Password Checking.pdf
- Threat Intelligence Computing.pdf
- Trends, challenge, and shifts in software vulnerability mitigation.pdf
- Web Sixth Sense A Study of Scripts Accessing Smartphone Sensors.pdf
- When Good Components Go Bad Formally Secure Compilation Despite Dynamic Compromise.pdf
- Yet Another Text Captcha Solver A Generative Adversarial Network Based Approach.pdf
- browser-security-whitepaper.pdf
- mXSS.md
- mXSS.pdf
- Barak Sternberg - Extension-Land - exploits and rootkits in your browser extensions.pdf
- Ben Kurtz - Offensive Golang Bonanza - Writing Golang Malware.pdf
- Firmware slap automating discovery of exploitable vulnerabilities in firmware.pdf
- Analysis of Mutation and Generation-Based Fuzzing.pdf
- defcon-22-geoff-mcdonald-meddle-framework-updated.pdf
- Your IoTs Are (Not) Mine On the Remote BindingBetween IoT Devices and Users.md
- Your IoTs Are (Not) Mine On the Remote BindingBetween IoT Devices and Users.pdf
- pwn edge.pdf
- KATCH High-Coverage Testing of Software Patches.md
- KATCH High-Coverage Testing of Software Patches.pdf
- Steelix Program-State Based Binary Fuzzing.pdf
- Boosting Fuzzer Efficiency An Information Theoretic Perspective.pdf
- CrFuzz Fuzzing Multi-purpose Programs through Input Validation.pdf
- Fuzzing On the Exponential Cost of Vulnerability Discovery.pdf
- MTFuzz Fuzzing with a Multi-task Neural Network.pdf
- Stateful Fuzzing with Snapshots.pdf
- Embedded Research & Automation.pdf
- CLOSING KEYNOTE - Natalie Silvanovich - The ECMA and The Chakra.pdf
- D1T2 - Linan Hao and Long Liu - The Secret of ChakraCore.pdf
- From_Out_of_Memory_to_Remote_Code_Execution_Yuki_Chen_PacSec2017_final.pdf
- Static Code Analysis Recognition Evasion.pdf
- Building Next-Gen Security Analysis Tools with Qiling Framework - Kai Jern Lau & Simone Berni.pdf
- D1 COMMSEC - API Security Through External Attack Surface Management - Phillip Wylie.pdf
- D1 COMMSEC - Building an Army of Bots by Hijacking a Unicorn’s Twitter Handle - Rahul Sasi & Vishal Singh.pdf
- D1T1 - EDR Evasion Primer for Red Teamers - Karsten Nohl & Jorge Gimenez.pdf
- D2T1 - Browser Hacking with ANGLE - Jeonghoon Shin.pdf
- D2T1 - Scripts-behavioral ML Classification Using Windows 10 AMSI-instrumentation - Ankit Garg.pdf
- D2T1 - Suborner - Windows Bribery for Invisible Persistence - Sebastian Castro.pdf
- DifFuzz Differential Fuzzing for Side-Channel Analysis.pdf
- REST-ler Automatic Intelligent REST API Fuzzing.md
- REST-ler Automatic Intelligent REST API Fuzzing.pdf
- SLF Fuzzing without Valid Seed Inputs.pdf
- Superion Grammar-Aware Greybox Fuzzing.md
- Superion Grammar-Aware Greybox Fuzzing.pdf
- MemLock Memory Usage Guided Fuzzing.pdf
- Typestate-Guided Fuzzer for Discovering Use-after-Free Vulnerabilities.md
- Typestate-Guided Fuzzer for Discovering Use-after-Free Vulnerabilities.pdf
- MemFuzz Using Memory Accesses to Guide Fuzzing.pdf
- SeqFuzzer An Industrial Protocol Fuzzing Framework in Deep Learning Perspective.pdf
- AFLNET A Greybox Fuzzer for Network Protocols.pdf
- Learn and Fuzz - Machine Learning for Input Fuzzing.md
- Learn and Fuzz - Machine Learning for Input Fuzzing.pdf
- The Security of Autonomous Driving： Threats, Defenses, and Future Directions.pdf
- The BORG Nanoprobing Binaries for Buffer Overreads.pdf
- 2016_SP_angrSoK.pdf
- Finding and Preventing Bugs in JavaScript Bindings.pdf
- CollAFL Path Sensitive Fuzzing.md
- CollAFL Path Sensitive Fuzzing.pdf
- T-Fuzz fuzzing by program transformation.pdf
- FirmFuzz Automated IoT Firmware Introspection and Analysis.pdf
- Full-speed Fuzzing Reducing Fuzzing Overhead through Coverage-guided Tracing - slides.pdf
- Full-speed Fuzzing Reducing Fuzzing Overhead through Coverage-guided Tracing.md
- Full-speed Fuzzing Reducing Fuzzing Overhead through Coverage-guided Tracing.pdf
- Send Hardest Problems My Way Probabilistic Path Prioritization for Hybrid Fuzzing slides.pdf
- Send Hardest Problems My Way Probabilistic Path Prioritization for Hybrid Fuzzing.pdf
- Dragonblood Analyzing the Dragonfly Handshake of WPA3 and EAP-pwd.pdf
- IJON Exploring Deep State Spaces via Fuzzing.md
- IJON Exploring Deep State Spaces via Fuzzing.pdf
- KARONTE Detecting Insecure Multi-binary Interactions in Embedded Firmware.md
- KARONTE Detecting Insecure Multi-binary Interactions in Embedded Firmware.pdf
- PANGOLIN Incremental Hybrid Fuzzing with Polyhedral Path Abstraction.pdf
- Tactical Provenance Analysis for Endpoint Detection and Response Systems.md
- Tactical Provenance Analysis for Endpoint Detection and Response Systems.pdf
- TaintScope A Checksum-Aware Directed Fuzzing Tool for Automatic Software Vulnerability Detection.pdf
- Measuring and Mitigating the Risk of IP Reuse on Public Clouds.pdf
- Angora Efficient Fuzzing by Principled Search.md
- Angora Efficient Fuzzing by Principled Search.pdf
- Browser Fuzzing by Scheduled Mutation and Generation of Document Object Models .md
- Browser Fuzzing by Scheduled Mutation and Generation of Document Object Models .pdf
- End User and Administrator Mental Models of HTTPS.md
- End User and Administrator Mental Models of HTTPS.pdf
- Full-speed Fuzzing Reducing Fuzzing Overhead through Coverage-guided Tracing.pdf
- Full-speed Fuzzing Reducing Fuzzing Overhead.md
- Fuzzing File Systems via Two-Dimensional Input Space Exploration.md
- GramFuzz Fuzzing Testing of Web Brow.pdf
- GramFuzz Fuzzing Testing of Web Browsers Based on Grammar Analysis and Structural Mutation.md
- HOLMES Real-time APT Detection through Correlation of Suspicious Information Flows.md
- HOLMES Real-time APT Detection through Correlation of Suspicious Information Flows.pdf
- HVLearn - Automated black-box analysis of hostname verification in SSL TLS implementations.pdf
- NEZHA Efficient Domain-Independent Differential Testing.pdf
- NEZHA Efficient Domain-Independent Differential Testing_Slides.pdf
- ProFuzzer On-the-fly Input Type Probing for Better Zero-day Vulnerability Discovery.md
- ProFuzzer On-the-fly Input Type Probing for Better Zero-day Vulnerability Discovery.pdf
- RAZZER Finding Kernel Race Bugs through Fuzzing.md
- RAZZER Finding Kernel Race Bugs through Fuzzing.pdf
- Research on Android browser fuzzing based on bitmap structure .pdf
- Research on Android browser fuzzing based on bitmap structure.md
- Resident Evil Understanding Residential IP Proxy as a Dark Service.md
- Resident Evil Understanding Residential IP Proxy as a Dark Service.pdf
- SAVIOR Towards Bug-Driven Hybrid Testing.md
- SAVIOR Towards Bug-Driven Hybrid Testing.pdf
- Skyfire Data-Driven Seed Generation for Fuzzing.md
- Skyfire Data-Driven Seed Generation for Fuzzing.pdf
- Software Crash Analysis for Automatic Exploit Generation by Modeling Attacks as Symbolic Continuations.md
- Software Crash Analysis for Automatic Exploit Generation by Modeling Attacks as Symbolic Continuations.pdf
- The Limitations of Deep Learning in Adversarial Settings.md
- The Limitations of Deep Learning in Adversarial Settings.pdf
- Violating Assumptions with Fuzzing.md
- Violating Assumptions with Fuzzing.pdf
- Locate Then Detect Web Attack Detection via Attention-based Deep Neural Networks.md
- Locate Then Detect Web Attack Detection via Attention-based Deep Neural Networks.pdf
- Debunking the 100X GPU vs. CPU Myth An Evaluation of Throughput Computing on CPU and GPU.pdf
- Make It Work, Make It Right, Make It Fast Building a Platform-Neutral Whole-System Dynamic Binary Analysis Platform.pdf
- Badger Complexity Analysis with Fuzzing and Symbolic Execution.pdf
- Compiler Fuzzing through Deep Learning.pdf
- PerfFuzz Automatically Generating Pathological Inputs-ppt.pdf
- PerfFuzz Automatically Generating Pathological Inputs.pdf
- DeepHunter A Coverage-Guided Fuzz Testing Framework for Deep Neural Networks.pdf
- Deferred Concretization in Symbolic Execution via Fuzzing.pdf
- Semantic Fuzzing with Zest.pdf
- Active Fuzzing for Testing and Securing Cyber-Physical Systems.pdf
- Learning Input Tokens for Effective Fuzzing.pdf
- WEIZZ Automatic Grey-Box Fuzzingfor Structured Binary Formats.pdf
- APT 攻守道.pdf
- PHP动态特性的捕捉与逃逸.pdf
- Bitcoin A Peer-to-Peer Electronic Cash System.md
- Bitcoin A Peer-to-Peer Electronic Cash System.pdf
- browser-ui-security-whitepaper.pdf
- Critical Vulnerability in Browser Security Metrics.pdf
- cure53 browser-security-whitepaper.md
- cure53 browser-security-whitepaper.pdf
- Drive-by Key-Extraction Cache Attacks from Portable Code.md
- Drive-by Key-Extraction Cache Attacks from Portable Code.pdf
- Escaping Internet Explorer Protected Mode .pdf
- Escaping Internet Explorer Protected Mode.md
- Exploiting_Chrome_IPC_Final.pdf
- Fuzzing JavaScript Engine APIs.md
- Fuzzing JavaScript Engine APIs.pdf
- Fuzzing with Code fragment.pdf
- hicks-fuzz-testing-eval.md
- hicks-fuzz-testing-eval.pdf
- How we found 5 0days in WordPress.pdf
- Life of a Pixel 2018.pdf
- Living-off-theLand-An-APT-case-study .pdf
- nodefuzz.pdf
- pizlo-dls2017-vmil2017-jscvm-slides.pdf
- popunder.pdf
- Test Harness For Web Browser Fuzz Testing.md
- Test Harness For Web Browser Fuzz Testing.pdf
- The Security Architecture of the Chromium Browser.pdf
- The-13th-JSON-Attacks.pdf
- Tor The Second-Generation Onion Router.md
- Tor The Second-Generation Onion Router.pdf
- vrankenfuzz.pdf
- X41-Browser-Security-White-Paper.pdf
- 长亭技术专栏2018年度文集.pdf
- neural-fuzzing-mcr.md
- neural-fuzzing-mcr.pdf
- Avatar A Framework to Support Dynamic Security Analysis of Embedded Systems' Firmwares slides.pdf
- Avatar A Framework to Support Dynamic Security Analysis of Embedded Systems' Firmwares.pdf
- Driller Augmenting Fuzzing Through Selective Symbolic Execution.pdf
- Towards Automated Dynamic Analysis for Linux-based Embedded Firmware slides.pdf
- Towards Automated Dynamic Analysis for Linux-based Embedded Firmware.md
- Towards Automated Dynamic Analysis for Linux-based Embedded Firmware.pdf
- IOTFUZZER：Discovering Memory Corruptions in IoT Through App-based Fuzzing.md
- IOTFUZZER：Discovering Memory Corruptions in IoT Through App-based Fuzzing.pdf
- What You Corrupt Is Not What You Crash Challenges in Fuzzing Embedded Devices.pdf
- What You Corrupt Is Not What You Crash Challenges in Fuzzing Embedded Devices.ppt.pdf
- A Systematic Framework to Generate Invariants for Anomaly Detection in Industrial Control Systems - ppt.pdf
- A Systematic Framework to Generate Invariants for Anomaly Detection in Industrial Control Systems.pdf
- Analyzing Semantic Correctness with Symbolic Execution A Case Study on PKCS#1 v1.5 Signature Verification-ppt.pdf
- Analyzing Semantic Correctness with Symbolic Execution A Case Study on PKCS#1 v1.5 Signature Verification.pdf
- BadBluetooth Breaking Android Security Mechanisms via Malicious Bluetooth Peripherals.md
- BadBluetooth Breaking Android Security Mechanisms via Malicious Bluetooth Peripherals.pdf
- CodeAlchemist Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines - ppt.pdf
- CodeAlchemist Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines.md
- CodeAlchemist Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines.pdf
- DIAT Data Integrity Attestation for Resilient Collaboration of Autonomous Systems - ppt.pdf
- DIAT Data Integrity Attestation for Resilient Collaboration of Autonomous Systems.pdf
- ICSREF A Framework for Automated Reverse Engineering of Industrial Control Systems Binaries - ppt.pdf
- ICSREF A Framework for Automated Reverse Engineering of Industrial Control Systems Binaries.md
- ICSREF A Framework for Automated Reverse Engineering of Industrial Control Systems Binaries.pdf
- JavaScript Template Attacks Automatically Inferring Host Information for Targeted Exploits-ppt.pdf
- JavaScript Template Attacks Automatically Inferring Host Information for Targeted Exploits.md
- JavaScript Template Attacks Automatically Inferring Host Information for Targeted Exploits.pdf
- Master of Web Puppets Abusing Web Browsers for Persistent and Stealthy Computation - ppt.pdf
- Master of Web Puppets Abusing Web Browsers for Persistent and Stealthy Computation.md
- Master of Web Puppets Abusing Web Browsers for Persistent and Stealthy Computation.pdf
- NAUTILUS - Fishing for Deep Bugs with Grammars.md
- NAUTILUS - Fishing for Deep Bugs with Grammars.pdf
- One Engine To Serve em Al Inferring Taint Rules Without Architectural Semantics - ppt.pdf
- PeriScope An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary-ppt.pdf
- PeriScope An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary.md
- PeriScope An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary.pdf
- Profit Detecting and Quantifying Side Channels in Networked Applications - ppt.pdf
- Profit Detecting and Quantifying Side Channels in Networked Applications.pdf
- REDQUEEN Fuzzing with Input-to-State Correspondence-ppt.pdf
- REDQUEEN Fuzzing with Input-to-State Correspondence.md
- REDQUEEN Fuzzing with Input-to-State Correspondence.pdf
- TextBugger Generating Adversarial Text Against Real-world Applications-ppt.pdf
- TextBugger Generating Adversarial Text Against Real-world Applications.md
- TextBugger Generating Adversarial Text Against Real-world Applications.pdf
- Unveiling your keystrokes A Cache-based Side-channel Attack on Graphics Lib.pdf
- Cross-Origin State Inference (COSI) Attacks Leaking Web Site States through XS-Leaks.pdf
- Deceptive Previews A Study of the Link Preview.pdf
- HotFuzz Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing.pdf
- Melting Pot of Origins Compromising the Intermediary Web Services that Rehost Websites.pdf
- Not All Coverage Measurements Are Equal Fuzzing by Coverage Accounting for Input Prioritization-slides.pdf
- Not All Coverage Measurements Are Equal Fuzzing by Coverage Accounting for Input Prioritization.pdf
- UNICORN Runtime Provenance-Based Detector for Advanced Persistent Threats.pdf
- A Devil of a Time How Vulnerable is NTP to Malicious Timeservers.pdf
- Peerlock Flexsealing BGP.pdf
- Subverting Stateful Firewalls with Protocol States.pdf
- Don’t Trust The Locals Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild.md
- Don’t Trust The Locals Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild.pdf
- Neural Machine Translation Inspired Binary Code Similarity Comparison beyond Function Pairs.md
- Neural Machine Translation Inspired Binary Code Similarity Comparison beyond Function Pairs.pdf
- Synode Understanding and Automatically Preventing Injection Attacks on Nodejs.md
- Synode Understanding and Automatically Preventing Injection Attacks on Nodejs.pdf
- VulDeePecker.md
- VulDeePecker.pdf
- VUzzer Application-aware Evolutionary Fuzzing.pdf
- From Assembly to JavaScript and back.pdf
- Attacking JavaScript Engines in 2022.pdf
- BeaconFuzz A Journey into Ethereum 2.0 Blockchain Fuzzing and Vulnerability Discovery.pdf
- Attacking Edge Through the JavaScript Compiler.pdf
- Chrome IPC Exploitation.pdf
- Coverage-Guided USB Fuzzing with Syzkaller.pdf
- Fuzzil：Guided Fuzzing for JavaScript Engines ppt.pdf
- Fuzzil：Guided Fuzzing for JavaScript Engines.md
- Fuzzil：Guided Fuzzing for JavaScript Engines.pdf
- Compiler Fuzzing How Much Does It Matter.md
- Compiler Fuzzing How Much Does It Matter.pdf
- FuzzFactoryDomain-Specific Fuzzing with Waypoints.pdf
- 劫持你的屏幕打开智能电视认证的三重门.pdf
- 大数据和AI技术决胜安全对抗.pdf
- 情报驱动的安全运营体系.pdf
- Coverage-Directed Differential Testing of JVM Implementations.pdf
- Coverage-Directed Differential Testing of JVM Implementations.pptx
- Parser-Directed Fuzzing.pdf
- windowskernelfuzz.pdf
- 1day-browser-exploitaion.pdf
- Attacking Modern Web Technologies.pdf
- Blink Rendering.pptx
- BrowserFuzzing2014_0706.pdf
- data-knowledge-action_cdxy.pdf
- DOP-slides.pptx
- exploitingunknownbrowsers.pdf
- FunWithLDAPandKerberos_Flathers_Troopers2019.pdf
- JavaScript engine fundamentals the good the bad and the ugly.pdf
- php_internals_exploit_dev.pdf
- pizlo-icooolps2018-inline-caches-slides.pdf
- Taking_Browsers_Fuzzing_to_the_next_(DOM)_Level.md
- Taking_Browsers_Fuzzing_to_the_next_(DOM)_Level.pdf
- the_art_of_fuzzing_slides.pdf
- ZeroNights2017-darko-fuzzer.pdf
- PowerFL Fuzzing VxWorks embedded system.pdf
- CRYPTOREX Large-scale Analysis of Cryptographic Misuse in IOT Devices.md
- CRYPTOREX Large-scale Analysis of Cryptographic Misuse in IOT Devices.pdf
- Cyber Threat Intelligence Modeling Based on Heterogeneous Graph.pdf
- Chromium_Sandbox_on_Linux_blackhoodie.pdf
- Chakra vulnerability and exploit bypass all system mitigation.pdf
- Shellcodes are for the 99.md
- Shellcodes are for the 99.pdf
- ACIDRain Concurrency-Related Attacks on Database-Backed Web Applications.pdf
- Fast and Precise Hybrid Type Inference for JavaScript.pdf
- Parser-Directed Fuzzing.md
- Parser-Directed Fuzzing.pdf
- Synthesizing program input grammars.pdf
- Greybox Automatic Exploit Generationfor Heap Overflows in Language Interpreters.pdf
- Smart Greybox Fuzzing.md
- Smart Greybox Fuzzing.pdf
- QEMU, a Fast and Portable Dynamic Translator.pdf
- Dowsing for Overflows A Guided Fuzzer to Find Buffer Boundary Violations.md
- Dowsing for Overflows A Guided Fuzzer to Find Buffer Boundary Violations.pdf
- ZMap Fast Internet-wide Scanning and Its Security Applications slides.pdf
- ZMap Fast Internet-wide Scanning and Its Security Applications.pdf
- SURROGATES Enabling Near-Real-TimeDynamic Analyses ofEmbedded Systems.pdf
- Stealing Machine Learning Models via Prediction APIs.pdf
- All Your Clicks Belong to Me Investigating Click Interception on the Web - ppt.pdf
- All Your Clicks Belong to Me Investigating Click Interception on the Web.pdf
- Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms.md
- Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms.pdf
- EnFuzz Ensemble Fuzzing with Seed Synchronization among Diverse Fuzzers.pdf
- FIRM-AFL High-Throughput Greybox Fuzzing of IoT Firmware via Augmented Process Emulation.md
- FIRM-AFL High-Throughput Greybox Fuzzing of IoT Firmware via Augmented Process Emulation.pdf
- GRIMOIRE Synthesizing Structure while Fuzzing slides.pdf
- GRIMOIRE Synthesizing Structure while Fuzzing.pdf
- Leaky Images Targeted Privacy Attacks in the Web.pdf
- Mobile Private Contact Discovery at Scale.pdf
- MOPT-Optimized Mutation Scheduling for Fuzzers.md
- MOPT-Optimized Mutation Scheduling for Fuzzers.pdf
- The KNOB is Broken Exploiting Low Entropy in the Encryption Key Negotiation Of Bluetooth BR EDR.pdf
- Toward the Analysis of Embedded Firmware through Automated Re-hosting.pdf
- A Longitudinal and Comprehensive Study of the DANE Ecosystem in Email - slides.pdf
- A Longitudinal and Comprehensive Study of the DANE Ecosystem in Email.pdf
- Agamotto Accelerating Kernel Driver Fuzzing with Lightweight Virtual Machine Checkpoints - slides.pdf
- Agamotto Accelerating Kernel Driver Fuzzing with Lightweight Virtual Machine Checkpoints.md
- Agamotto Accelerating Kernel Driver Fuzzing with Lightweight Virtual Machine Checkpoints.pdf
- Analysis of DTLS Implementations Using Protocol State Fuzzing - slides.pdf
- Analysis of DTLS Implementations Using Protocol State Fuzzing.pdf
- AURORA Statistical Crash Analysis for Automated Root Cause Explanation-slides.pdf
- AURORA Statistical Crash Analysis for Automated Root Cause Explanation.pdf
- Cached and Confused Web Cache Deception in the Wild slides.pdf
- Cached and Confused Web Cache Deception in the Wild.pdf
- EcoFuzz Adaptive Energy-Saving Greybox Fuzzing as aVariant of the Adversarial Multi-Armed Bandit - slides.pdf
- EcoFuzz Adaptive Energy-Saving Greybox Fuzzing as aVariant of the Adversarial Multi-Armed Bandit.md
- EcoFuzz Adaptive Energy-Saving Greybox Fuzzing as aVariant of the Adversarial Multi-Armed Bandit.pdf
- FANS Fuzzing Android Native System Services via Automated Interface Analysis - slides.pdf
- FANS Fuzzing Android Native System Services via Automated Interface Analysis.pdf
- Frankenstein Advanced Wireless Fuzzing toExploit New Bluetooth Escalation Targets - slides.pdf
- Frankenstein Advanced Wireless Fuzzing toExploit New Bluetooth Escalation Targets.pdf
- FuzzGen Automatic Fuzzer Generation - slides.pdf
- FuzzGen Automatic Fuzzer Generation.pdf
- FuzzGuard Filtering out Unreachable Inputs in Directed Grey-box Fuzzing through Deep Learning - slides.pdf
- FuzzGuard Filtering out Unreachable Inputs in Directed Grey-box Fuzzing through Deep Learning.pdf
- Fuzzing Error Handling Code using Context-Sensitive Software Fault Injection - slides.pdf
- Fuzzing Error Handling Code using Context-Sensitive Software Fault Injection.md
- Fuzzing Error Handling Code usingContext-Sensitive Software Fault Injection.pdf
- GREYONE Data Flow Sensitive Fuzzing.md
- GREYONE Data Flow Sensitive Fuzzing.pdf
- HALucinator Firmware Re-hosting Through Abstraction Layer Emulation.md
- HALucinator Firmware Re-hosting Through Abstraction Layer Emulation.pdf
- Montage A Neural Network LanguageModel-Guided JavaScript Engine Fuzzer - slides.pdf
- Montage A Neural Network LanguageModel-Guided JavaScript Engine Fuzzer.pdf
- Muzz Thread-aware Grey-box Fuzzing for Effective Bug Hunting in Multithreaded Programs - slides.pdf
- Muzz Thread-aware Grey-box Fuzzing for Effective Bug Hunting in Multithreaded Programs.pdf
- MVP Detecting Vulnerabilities using Patch-Enhanced Vulnerability Signatures - slides.pdf
- MVP Detecting Vulnerabilities using Patch-Enhanced Vulnerability Signatures.pdf
- NXNSAttack Recursive DNS Inefficiencies and Vulnerabilities - slides.pdf
- NXNSAttack Recursive DNS Inefficiencies and Vulnerabilities.pdf
- P2IM Scalable and Hardware-independent Firmware Testing via Automatic Peripheral Interface Modeling.md
- P2IM Scalable and Hardware-independent Firmware Testing via Automatic Peripheral Interface Modeling.pdf
- ParmeSan Sanitizer-guided Greybox Fuzzing - slides.pdf
- ParmeSan Sanitizer-guided Greybox Fuzzing.pdf
- Poison Over Troubled Forwarders A Cache Poisoning Attack Targeting DNS Forwarding Devices-slides.pdf
- Poison Over Troubled Forwarders A Cache Poisoning Attack Targeting DNS Forwarding Devices.pdf
- Symbolic execution with SymCC Don’t interpret, compile! slides.pdf
- Symbolic execution with SymCC Don’t interpret, compile!.pdf
- Sys A Static Symbolic Tool for Finding Good Bugs in Good (Browser) Code - slides.pdf
- Sys A Static Symbolic Tool for Finding Good Bugs in Good (Browser) Code.pdf
- The Industrial Age of Hacking - slides.pdf
- The Industrial Age of Hacking.pdf
- USBFuzz A Framework for Fuzzing USB Drivers by Device Emulation - slides.pdf
- USBFuzz A Framework for Fuzzing USB Drivers by Device Emulation.md
- USBFuzz A Framework for Fuzzing USB Drivers by Device Emulation.pdf
- Android SmartTVs Vulnerability Discovery via Log-Guided Fuzzing slides.pdf
- Android SmartTVs Vulnerability Discovery via Log-Guided Fuzzing.pdf
- Automatic Firmware Emulation through Invalidity-guided Knowledge Inference slides.pdf
- Automatic Firmware Emulation through Invalidity-guided Knowledge Inference.pdf
- Automatic Policy Generation for Inter-Service Access Control of Microservices slides.pdf
- Automatic Policy Generation for Inter-Service Access Control of Microservices.pdf
- Blind In On-Path Attacks and Applications to VPNs slides.pdf
- Blind In On-Path Attacks and Applications to VPNs.pdf
- Causal Analysis for Software-Defined Networking Attacks slides.pdf
- Causal Analysis for Software-Defined Networking Attacks.pdf
- Constraint-guided Directed Greybox Fuzzing slides.pdf
- Constraint-guided Directed Greybox Fuzzing.pdf
- Fine Grained Dataflow Tracking with Proximal Gradients slides.pdf
- Fine Grained Dataflow Tracking with Proximal Gradients.pdf
- Fingerprinting in Style Detecting Browser Extensions via Injected Style Sheets slides.pdf
- Fingerprinting in Style Detecting Browser Extensions via Injected Style Sheets.pdf
- Jetset Targeted Firmware Rehosting for Embedded Systems slides.pdf
- Jetset Targeted Firmware Rehosting for Embedded Systems.pdf
- LZR Identifying Unexpected Internet Services slides.pdf
- LZR Identifying Unexpected Internet Services.pdf
- ReDMArk Bypassing RDMA Security Mechanisms slides.pdf
- ReDMArk Bypassing RDMA Security Mechanisms.pdf
- Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries slides.pdf
- Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries.pdf
- Weak Links in Authentication Chains A Large-scale Analysis of Email Sender Spoofing Attacks slides.pdf
- Weak Links in Authentication Chains A Large-scale Analysis of Email Sender Spoofing Attacks.pdf
- Weaponizing Middleboxes for TCP Reflected Amplification slides.pdf
- Weaponizing Middleboxes for TCP Reflected Amplification.pdf
- You Autocomplete Me Poisoning Vulnerabilities in Neural Code Completion slides.pdf
- You Autocomplete Me Poisoning Vulnerabilities in Neural Code Completion.pdf
- Characterizing the Security of Github CI Workflows slides.pdf
- Characterizing the Security of Github CI Workflows.pdf
- COMRace Detecting Data Race Vulnerabilities in COM Objects slides.pdf
- COMRace Detecting Data Race Vulnerabilities in COM Objects.pdf
- Creating a Secure Underlay for the Internet slides.pdf
- Creating a Secure Underlay for the Internet.pdf
- Drifuzz Harvesting Bugs in Device Drivers from Golden Seeds slides.pdf
- Drifuzz Harvesting Bugs in Device Drivers from Golden Seeds.pdf
- Exploring the Unchartered Space of Container Registry Typosquatting slides.pdf
- Exploring the Unchartered Space of Container Registry Typosquatting.pdf
- FRAMESHIFTER Security Implications of HTTP2-to-HTTP1 Conversion Anomalies.pdf
- FuzzOrigin Detecting UXSS vulnerabilities in Browsers through Origin Fuzzing.pdf
- Fuzzware Using Precise MMIO Modeling for Effective Firmware Fuzzing.pdf
- GET out Automated Discovery of Application-Layer Censorship Evasion Strategies.pdf
- Lumos Identifying and Localizing Diverse Hidden IoT Devices in an Unfamiliar Environment slides.pdf
- Lumos Identifying and Localizing Diverse Hidden IoT Devices in an Unfamiliar Environment.pdf
- Mining Node.js Vulnerabilities via Object Dependence Graph and Query.pdf
- Morphuzz Bending (Input) Space to Fuzz Virtual Devices.pdf
- Off-Path Network Traffic Manipulation via Revitalized ICMP Redirect Attacks slides.pdf
- Off-Path Network Traffic Manipulation via Revitalized ICMP Redirect Attacks.pdf
- Online Website Fingerprinting Evaluating Website Fingerprinting Attacks on Tor in the Real World slides.pdf
- Online Website Fingerprinting Evaluating Website Fingerprinting Attacks on Tor in the Real World.pdf
- PolyCruise A Cross-Language Dynamic Information Flow Analysis slides.pdf
- PolyCruise A Cross-Language Dynamic Information Flow Analysis.pdf
- Practical Privacy-Preserving Authentication for SSH slides.pdf
- Practical Privacy-Preserving Authentication for SSH.pdf
- RapidPatch Firmware Hotpatching for Real-Time Embedded Devices slides.pdf
- RapidPatch Firmware Hotpatching for Real-Time Embedded Devices.pdf
- Spoki Unveiling a New Wave of Scanners through a Reactive Network Telescope slides.pdf
- Spoki Unveiling a New Wave of Scanners through a Reactive Network Telescope.pdf
- Stateful Greybox Fuzzing slides.pdf
- Stateful Greybox Fuzzing.pdf
- StateFuzz System Call-Based State-Aware Linux Driver Fuzzing slides.pdf
- StateFuzz System Call-Based State-Aware Linux Driver Fuzzing.pdf
- The Security Lottery Measuring Client-Side Web Security Inconsistencies slides.pdf
- The Security Lottery Measuring Client-Side Web Security Inconsistencies.pdf
- Under the Hood of DANE Mismanagement in SMTP slides.pdf
- Under the Hood of DANE Mismanagement in SMTP.pdf
- Uninvited Guests Analyzing the Identity and Behavior of Certificate Transparency Bots.pdf
- An Input-Agnostic Hierarchical Deep Learning Framework for Traffic Fingerprinting slides.pdf
- An Input-Agnostic Hierarchical Deep Learning Framework for Traffic Fingerprinting.pdf
- Attacks are Forwarded Breaking the Isolation of MicroVM-based Containers Through Operation Forwarding.pdf
- Bleem Packet Sequence Oriented Fuzzing for Protocol Implementations slides.pdf
- Bleem Packet Sequence Oriented Fuzzing for Protocol Implementations.pdf
- Detecting Multi-Step IAM Attacks in AWS Environments via Model Checking slides.pdf
- Detecting Multi-Step IAM Attacks in AWS Environments via Model Checking.pdf
- Did the Shark Eat the Watchdog in the NTP Pool Deceiving the NTP Pool’s Monitoring System slides.pdf
- Did the Shark Eat the Watchdog in the NTP Pool Deceiving the NTP Pool’s Monitoring System.pdf
- Downgrading DNSSEC How to Exploit Crypto Agility for Hijacking Signed Zones slides.pdf
- Downgrading DNSSEC How to Exploit Crypto Agility for Hijacking Signed Zones.pdf
- NAUTILUS Automated RESTful API Vulnerability Detection.pdf
- Pool-Party Exploiting Browser Resource Pools for Web Tracking.pdf
- TRIDENT Towards Detecting and Mitigating Web-based Social Engineering Attacks slides.pdf
- TRIDENT Towards Detecting and Mitigating Web-based Social Engineering Attacks.pdf
- Trojan Source Invisible Vulnerabilities slides.pdf
- Trojan Source Invisible Vulnerabilities.pdf
- We Really Need to Talk About Session Tickets A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets slides.pdf
- We Really Need to Talk About Session Tickets A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets.pdf
- An Empirical Analysis of Single Sign-On Account Hijacking and Session Management on the Web.md
- An Empirical Analysis of Single Sign-On Account Hijacking and Session Management on the Web.pdf
- an Empirical Study of CORS.md
- an Empirical Study of CORS.pdf
- Author Attribute Anonymity by Adversarial Training of Neural Machine Translation.pdf
- Automatic Generation of Data-Oriented Exploits.md
- Automatic Generation of Data-Oriented Exploits.pdf
- Effective Attacks and Provable Defenses for Website Fingerprinting.pdf
- Empirical Analysis of Redirection Hijacking in Content Delivery Networks.md
- Empirical Analysis of Redirection Hijacking in Content Delivery Networks.pdf
- Fortifying Web Protocols via Browser-Side Security Monitoring.pdf
- fuze.md
- fuze.pdf
- Fuzzing with Code Fragments.md
- Fuzzing with Code Fragments.pdf
- Generalized Transferability for Evasion and Poisoning Attacks.pdf
- Gnawing at Ethereum to Automatically Exploit Smart Contracts.pdf
- k-fingerprinting A Robust Scalable Website Fingerprinting Technique.md
- k-fingerprinting A Robust Scalable Website Fingerprinting Technique.pdf
- MoonShine Optimizing OS Fuzzer Seed Selection with Trace Distillation.md
- MoonShine Optimizing OS Fuzzer Seed Selection with Trace Distillation.pdf
- NAVEX Precise and Scalable Exploit Generation for Dynamic Web Applications.md
- NAVEX Precise and Scalable Exploit Generation for Dynamic Web Applications.pdf
- Optimizing seed selection for fuzzing.md
- Optimizing seed selection for fuzzing.pdf
- QSYM A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing.md
- QSYM A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing.pdf
- Reverse Engineering Ethereum’s Opaque Smart Contracts.pdf
- SoK Make JIT-Spray Great Again.md
- SoK Make JIT-Spray Great Again.pdf
- Syntia Synthesizing the Semantics of Obfuscated Code.pdf
- Towards Principled Bug Bounties and Exploit-Resistant Smart Contracts.pdf
- Watermarking Deep Neural Networks by Backdooring.md
- Watermarking Deep Neural Networks by Backdooring.pdf
- Gdev First-Class GPU Resource Management in the Operating System slides.pdf
- Gdev First-Class GPU Resource Management in the Operating System.pdf
- Soteria Automated IoT Safety and Security Analysis.md
- Soteria Automated IoT Safety and Security Analysis.pdf
- Unicorefuzz On the Viability of Emulation for Kernelspace Fuzzing-ppt.pdf
- Unicorefuzz On the Viability of Emulation for Kernelspace Fuzzing.pdf
- Android Enterprise Security White Paper.pdf
- Hardwear 2018 BLE Security Essentials.pdf
- 奇安信 APT报告 2019.pdf
- 绿盟 2018物联网安全年报.pdf
- .gitattributes
- cli.py
- papers.json
- README.md
// repository documentation
Was this content helpful?
(0 ratings)