lcamtuf's old blog

Thank you for stopping by.
I used to use this blog for infosec-related stuff, but over the years, the dynamics of the industry and the scope of my role evolved in a way that makes careless blogging not worth the risk. On top of this, Blogger - the hosting platform for this site...

This is an interesting demonstration of the capabilities of afl; I was actually pretty surprised that it worked!
In essence, I created a text file containing just "hello" and asked the fuzzer to keep feeding it to a program that expects a JPEG image (djpeg is a simple utility bundled with the ubiquitous IJG jpeg image library; libjpeg-turbo should also work). Of...

I'm proud to announce my third and by far the best book, Practical Doomsday: an enjoyable, data-packed romp through the world of rational emergency preparedness. The book builds on top of my earlier online preparedness guide to cut through the noise...

Bug bounties end up in the news with some regularity, usually for the wrong reasons. I've been itching to writeabout that for a while - but instead of dwelling on the mistakes of the bygone days, I figured it may be better totalk about some of the ways...