https://hexgolems.com/ Recent content on Hexgolems Hugo -- gohugo.io en-us Sun, 11 Oct 2020 00:00:00 +0000 https://hexgolems.com/2020/10/getting-started-with-ddlog/ Sun, 11 Oct 2020 00:00:00 +0000 https://hexgolems.com/2020/10/getting-started-with-ddlog/ Getting started with program analysis in Datalog by building a simple backwards symbolic execution engine in DDlog & Rust. https://hexgolems.com/2020/08/on-measuring-and-visualizing-fuzzer-performance/ Wed, 12 Aug 2020 00:00:00 +0000 https://hexgolems.com/2020/08/on-measuring-and-visualizing-fuzzer-performance/ A critique on how we evaluate fuzzer and a proposal for a better metric. https://hexgolems.com/2020/07/aurora/ Tue, 14 Jul 2020 00:00:00 +0000 https://hexgolems.com/2020/07/aurora/ Aurora automatically identifies the root cause of bugs found via fuzzing. Published at USENIX Security 2020 https://hexgolems.com/2020/07/ethbmc/ Tue, 14 Jul 2020 00:00:00 +0000 https://hexgolems.com/2020/07/ethbmc/ A bounded model checker for smart contracts, that can steal money. Published at USENIX Security 2020 https://hexgolems.com/2020/07/ijon/ Tue, 14 Jul 2020 00:00:00 +0000 https://hexgolems.com/2020/07/ijon/ Allows the user to guide the fuzzer through the state space of the target program. Published at Oakland S&P 2020 https://hexgolems.com/2020/04/incorrectness-logic-by-example/ Sat, 04 Apr 2020 00:00:00 +0000 https://hexgolems.com/2020/04/incorrectness-logic-by-example/ Understanding Incorrectness Logic for program analysis with lots of examples. https://hexgolems.com/2020/04/nautilus-2.0/ Wed, 01 Apr 2020 00:00:00 +0000 https://hexgolems.com/2020/04/nautilus-2.0/ Release of Nautilus 2.0 with many new features https://hexgolems.com/2019/12/hotfuzz/ Thu, 05 Dec 2019 00:00:00 +0000 https://hexgolems.com/2019/12/hotfuzz/ Talking about our research on fuzzing and future research areas. https://hexgolems.com/2019/11/fast-cov/ Fri, 01 Nov 2019 00:00:00 +0000 https://hexgolems.com/2019/11/fast-cov/ A fast binary coverage measurement tool based on AFL’s Qemu mode https://hexgolems.com/2019/08/hexslides-death-to-death-by-powerpoint/ Thu, 01 Aug 2019 00:00:00 +0000 https://hexgolems.com/2019/08/hexslides-death-to-death-by-powerpoint/ An opinionated tool to create beautiful presentations containing complex animations. https://hexgolems.com/2019/07/antifuzz/ Wed, 17 Jul 2019 00:00:00 +0000 https://hexgolems.com/2019/07/antifuzz/ Investigate weak points in current fuzzers to protect software from fully automatic fuzzing. Published at USENIX Security 2019 https://hexgolems.com/2019/07/grimoire/ Wed, 17 Jul 2019 00:00:00 +0000 https://hexgolems.com/2019/07/grimoire/ Automatically infer grammar like fragments during normal feedback fuzzing to improve test coverage. Published at USENIX Security 2019. https://hexgolems.com/2019/02/gdb_probe.rs/ Fri, 01 Feb 2019 00:00:00 +0000 https://hexgolems.com/2019/02/gdb_probe.rs/ Spawn a dynamic debugger from your application like ipdb.set_trace() / binding.pry, but in Rust. https://hexgolems.com/2019/01/hextd/ Tue, 01 Jan 2019 00:00:00 +0000 https://hexgolems.com/2019/01/hextd/ A deck building tower defense game written in Rust. https://hexgolems.com/2018/12/nautilus-fuzzing-with-grammars/ Mon, 17 Dec 2018 00:00:00 +0000 https://hexgolems.com/2018/12/nautilus-fuzzing-with-grammars/ An AFL style feedback fuzzer, that uses grammars to find more bugs. Written in Rust and published at NDSS 2019 https://hexgolems.com/2018/12/redqueen/ Mon, 17 Dec 2018 00:00:00 +0000 https://hexgolems.com/2018/12/redqueen/ A binary fuzzer that automatically solves magic Bytes and checksums during fuzzing. Published at NDSS 2019. https://hexgolems.com/2017/12/syntia/ Sun, 17 Dec 2017 00:00:00 +0000 https://hexgolems.com/2017/12/syntia/ Uses program synthesis to deobfuscate VM instruction handlers used by obfuscators such as VMProtect and Themida. Published at USENIX Security 2017. https://hexgolems.com/2017/08/kafl/ Thu, 17 Aug 2017 00:00:00 +0000 https://hexgolems.com/2017/08/kafl/ An AFL style feedback fuzzer, that uses Intel-PT to trace operating systems without access to sourcecode. Published at USENIX Security 2017 https://hexgolems.com/2017/05/interval-tree/ Mon, 01 May 2017 00:00:00 +0000 https://hexgolems.com/2017/05/interval-tree/ A very efficient data structure to query ranges for Rust. Useful to implement analysis passes on memory/code/firmware dumps. https://hexgolems.com/2017/02/loaded-dice/ Wed, 01 Feb 2017 00:00:00 +0000 https://hexgolems.com/2017/02/loaded-dice/ Sample from discrete distributions in O(1). Very useful when building randomized generators and fuzzer in Rust. https://hexgolems.com/2016/08/smt-solver-workshop/ Mon, 01 Aug 2016 00:00:00 +0000 https://hexgolems.com/2016/08/smt-solver-workshop/ A one day workshop on using SMT-Solvers and bounded model checker for reverse engineering and binary analysis. https://hexgolems.com/2016/03/pwgen/ Tue, 01 Mar 2016 00:00:00 +0000 https://hexgolems.com/2016/03/pwgen/ A human friendly pwgen based on XKCD 936 https://hexgolems.com/2016/03/rdbg/ Tue, 01 Mar 2016 00:00:00 +0000 https://hexgolems.com/2016/03/rdbg/ A ruby programmable debugger library based on the linux ptrace API and /proc/$pid/ interfaces. https://hexgolems.com/2016/01/indika/ Fri, 01 Jan 2016 00:00:00 +0000 https://hexgolems.com/2016/01/indika/ Robust semantic hashes for arbitrary x86 functions. Identify functions in very large database, even when compiled with different options. https://hexgolems.com/2015/04/reverse-game-of-life/ Wed, 01 Apr 2015 00:00:00 +0000 https://hexgolems.com/2015/04/reverse-game-of-life/ Use a SMT solver to invert the arrow of time in Game Of Life. https://hexgolems.com/2014/10/pint/ Wed, 01 Oct 2014 00:00:00 +0000 https://hexgolems.com/2014/10/pint/ Use LUA scripting for dynamic binary instrumentation and analysis using PIN. https://hexgolems.com/2014/10/schemdbg/ Wed, 01 Oct 2014 00:00:00 +0000 https://hexgolems.com/2014/10/schemdbg/ A web based debugger front-end for debugging and reversing binaries. Easily allows to create complex widgets and scripts. https://hexgolems.com/2014/07/brainfuck-jit/ Tue, 01 Jul 2014 00:00:00 +0000 https://hexgolems.com/2014/07/brainfuck-jit/ A compiler, interpreter and JITer for brainfuck. Build in literate ruby. https://hexgolems.com/2013/08/battlefleet/ Thu, 01 Aug 2013 00:00:00 +0000 https://hexgolems.com/2013/08/battlefleet/ A round based strategy game, build for the Ludum Dare 27 competition. https://hexgolems.com/2012/12/azure-vm/ Sat, 01 Dec 2012 00:00:00 +0000 https://hexgolems.com/2012/12/azure-vm/ A small custom VM written in golang that was used as a service during the 2012 RWTH-CTF. https://hexgolems.com/2011/10/codewars/ Sat, 01 Oct 2011 00:00:00 +0000 https://hexgolems.com/2011/10/codewars/ A competitive programming challenge similar to Corewars, used in 2011 RWTH-CTF