Sebastian Poeplau

Interested in fuzzing and symbolic execution? Recently we integrated Symcc+afl into #Fuzzbench and an experiment is running as we speak - so far Symcc is killing it!! Follow along fuzzbench.com/reports/experi…

Our new paper (to appear at NDSS 21) with @poeplau SymQEMU: Compilation-based symbolic execution for binaries Like for SymCC we directly embed the instrumentation for symbolic execution in the app, but this time in QEMU, so works with binaries PDF: s3.eurecom.fr/docs/ndss21_sy…

@iamcorso @aurelsec @travisgoodspeed @USENIXSecurity I'll improve the docs to make those two things more explicit

@iamcorso @aurelsec @travisgoodspeed @USENIXSecurity Hmm, if the afl-showmap binary was found then it's not the relative paths. There is another quirk that could be the culprit: in your AFL command line, you need to use "--" before calling the target; that's how the helper infers the right way to call the target with afl-showmap...

Today @poeplau and I release SymCC: a symbolic execution framework based on compilation (instead of interpretation, like @kleesymex and #angr). This brings a huge speedup (up to 3 orders of magnitude in some tests). The @USENIXSecurity preprint: s3.eurecom.fr/docs/usenixsec…

@iamcorso @aurelsec @travisgoodspeed @USENIXSecurity The helper uses the path to afl-fuzz from AFL's fuzzer_stats file to find afl-showmap. By any chance, did you use a relative path from a different working directory?

@aurelsec @travisgoodspeed @USENIXSecurity awesome! btw, i had to monkeypatch the fuzzing_helper to invoke afl-showmap correctly, not sure if it's my fault, though.

Reserve your seat at the 2015 Honeynet Project Workshop in Stavanger, Norway | Early Birds until Feb 20! buff.ly/1FU5X5n #hnw2015

Early bird rates are available for #hnw2015 | youtu.be/4GZYatoT0Qk

...or use the Python bindings to GhostLib included in 0.3

Anyone interested to hook Ghost up to @virustotal? They've got a C API now blog.virustotal.com/2014/06/virust…

Execute this! Looking at code-loading techniques in Android wp.me/p17xdu-a6 via @wordpressdotcom

2014 Honeynet Project Security Workshop in Warsaw! honeynet.org/node/1079

In case you missed the great news this morning registration for the 2014 Honeynet Project Workshop is open warsaw2014.honeynet.org/register.html please RT

WORKSHOP NEWS - May 12-14 in Warsaw, Poland honeynet.org/node/1139

David likes to record. He documents each moment of his life. Photos, video, audio. He never watches any of it. Not even when it happend

The new web frontend for Ghost - a setup guide: community.rapid7.com/community/open…

@ArtOfThinkering Excellent, that would be very welcome. Maybe we should continue via email - I could give some details on the current state

@ArtOfThinkering That would be great! A 64-bit version has been on the agenda for too long... Greatly appreciate your offer.

Ghost 0.3 released, featuring a rewritten core and a new web frontend: honeynet.org/node/1035

Anyone interested to help making Ghost ready for 64-bit systems?

Just about to release the next version of the Ghost USB honeypot - stay tuned...