0

FirmState: Bringing Cellular Protocol States to Shannon Baseband Emulation

Cellular baseband processors represent critical security components in modern mobile devices, yet they remain challenging to analyze due to their complexity and restricted access. While the FirmWire enables full-system baseband emulation, it lacks …

RGFuzz: Rule-Guided Fuzzer for WebAssembly Runtimes

WebAssembly runtimes embed compilers to compile WebAssembly code into machine code for execution. These compilers use various compiler rules to define how to optimize and lower the WebAssembly code. However, existing testing tools struggle to explore …

From the Vulnerability to the Victory: A Chrome Renderer 1-Day Exploit’s Journey to v8CTF Glory

In today’s digital era, where the internet has become as essential as the air we breathe, the browsers serve as our windows to the vast expanse of the digital world. On top of web surfing, browsers extend their capabilities from being integrated into …

One shot, Triple kill: Pwning all three Google kernelCTF instances with a single 1-day Linux vulnerability

Desktops, servers, cloud computing services, mobile devices, and IoT devices. Linux is the most popular open-source kernel and is used in various IT platforms. Because of the ubiquitous presence of Linux and the characteristic of the kernel which …

BaseComp: A Comparative Analysis for Integrity Protection in Cellular Baseband Software

QueryX: Symbolic Query on Decompiled Code for Finding Bugs in COTS Binaries

Fuzzing@Home: Distributed Fuzzing on Untrusted Heterogeneous Clients

DoLTEst: In-depth Downlink Negative Testing Framework for LTE Devices

HardsHeap: A Universal and Extensible Framework for Evaluating Secure Allocators

Secure allocators have been extensively studied to mitigate heap vulnerabilities. They employ safe designs and randomized mechanisms to stop or mitigate heap exploitation. Despite extensive research efforts, secure allocators can only be evaluated by …

Preventing Use-After-Free Attacks with Fast Forward Allocation

Memory-unsafe languages are widely used to implement critical systems like kernels and browsers, leading to thousands of memory safety issues every year. A use-after-free bug is a temporal memory error where the program accidentally visits a freed …