Gabriel Sherman's Avatar

Gabriel Sherman

@gabriel-sherman

Ph.D. Student at the University of Utah | Computer Security https://gabe-sherman.github.io/

56
Followers
28
Following
3
Posts
17.03.2025
Joined
Posts Following

Latest posts by Gabriel Sherman @gabriel-sherman

Harnessing 101: A Beginner's Guide to Fuzzing Harnesses | Gabriel Sherman As a newcomer to the computer security world working on my first paper, No Harness, No Problem: Oracle-guided Harnessing for Auto-generating C API Fuzzing Harnesses, I inevitably spent countless hours...

Curious about fuzzing but don't know where to start? I wrote my first blog post on how to choose your target, build an AFL++-compatible harness, and avoid common pitfalls.

Check it out:
gabe-sherman.github.io/2025-09-17-b...

18.09.2025 20:18 πŸ‘ 0 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0
Post image

Check it out!
πŸ“„ Paper:Β futures.cs.utah.edu/papers/25ATC.pdf
πŸ› οΈ Bin2Wrong:Β github.com/FuturesLab/Bin2Wrong
πŸ’₯Some impacts of bugs Bin2Wrong found: binary.ninja/2024/06/19/restructuring-the-decompiler.html

#fuzzing #decompilation

22.05.2025 20:04 πŸ‘ 1 πŸ” 2 πŸ’¬ 0 πŸ“Œ 0
Post image

OGHarn mutationally generates harnesses and uses 3 oracles of behavior to determine both their utility and validity, leading to the discovery of 41 new bugs(with zero false-positive crashes)!

Paper: futures.cs.utah.edu/papers/25ICS...
Source: github.com/FuturesLab/O...

Happy Fuzzing! πŸ›

17.03.2025 18:52 πŸ‘ 9 πŸ” 3 πŸ’¬ 0 πŸ“Œ 0

Need a fuzzing harness? No time to write one? Tired of false-positives? Let OGHarn lead the way to bug discovery!🐞

I'm excited to share my paper(with @snagycs.bsky.social)"No Harness, No Problem: Oracle-guided Harnessing for Auto-generating C API Fuzzing Harnesses" at @icseconf.bsky.social 2025!

17.03.2025 18:52 πŸ‘ 17 πŸ” 6 πŸ’¬ 1 πŸ“Œ 0