My student Zhenghao Hu (Zhenghao Hu) did a nice writeup on how all of the challenges in ChaffCTF worked: github.com/HighW4y2H3ll/c…

Today, we released the AFL++ CoreSight mode. It enables binary-only fuzzing with hardware-assisted feedback on ARM SoCs. Here is our blog post: ricercasecurity.blogspot.com/2021/11/armore…

Zhenghao Hu Ricerca Security Could you try to discover the ROM table using CSAL tools by referring this document? github.com/RICSecLab/CSAL…

lol, is this thing out like 11 days ago? github.com/apache/logging…

The camera-ready version of our IEEE S&P 2022 paper, "IRQDebloat: Reducing Driver Attack Surface in Embedded Devices" (w/Zhenghao Hu) is now available! messlab.moyix.net/papers/irqdebl…

Our paper is finally out! We've built this to automatically find IRQ handlers and patch the firmware to remove/bypass certain hardware features (e.g. bluetooth, UART etc.) live tweet updates happening now👇

Confirmed: influential hacker forum Raid Forums was seized by US/ Europol. The site mysteriously went offline last month and now cops confirm they were involved. Another big hit to cyber crime in what is proving to be a stellar 2022 for enforcement. europol.europa.eu/media-press/ne…

Chaff bugs made it to the front page of HN again a few days ago and I didn't even notice! news.ycombinator.com/item?id=310603…

The program for this year's IEEE S&P conference is now available at ieee-security.org/TC/SP2022/prog… - looking forward to many great presentations! #SP22

Very happy to say that our paper on fuzzing complex device drivers, "Drifuzz: Harvesting Bugs in Device Drivers from Golden Seeds" will appear at USENIX Security 2022! Congrats to @Bruceshenzk and Ritik Roongta!

The MESS Lab is working HARD this Friday

team MESS lab. or what was left after 6 hours

In just 10 minutes, Zhenghao Hu will be presenting IRQDebloat, which automatically reverse engineers interrupt handling on embedded devices so that unwanted peripherals can be disabled! If you're at S&P, be sure to check it out in G.Ballroom A!

Great wrap up for our the talk! Thanks Brendan Dolan-Gavitt & feel better!🧵

It's been a really long time! Really glad that chaff bugs is now officially PUBLISHED! lol

This paper deserved a home way sooner, such a cool idea and you should definitely check out their work!

In Seattle! after many delayed and canceled flights. 🫠Summer's be busy!

Make your software more secure by… adding more bugs to it?? Zhenghao Hu presents our work on Chaff Bugs at RAID Conference 2022 in Cyprus :)