I've been thinking a lot recently about what it means to do research in fuzzing. Most of what we do is a loose collection of "things we know to generally work pretty well" but without true understanding of why. I do often wonder what this means for us as a topic. We use fuzzing in many important projects, and yet,...

A two-part blog series posted on secret.club. Part 1 concerns the regex crate from Rust, investigating how limitations of original harnesses prevented the discovery of bugs which were shallow under grammar testing. We then discuss how the replacement was also limited, and introduce the concept of the data...

Video is available on YouTube. Presentation slides are available on Google Slides. Abstract Fuzzing is beautiful: powerful, automated, simple, elegant, and effective. Touted as one of, if not the, most powerful testing strategy available, fuzzing has seen widespread use and been the subject of great research in both...

Publication is provided on the primary author's website. Source code and other artifacts available online.

This was a presentation offered at the Search-Based and Fuzz Testing Workshop and at the Artificial Intelligence in Software Testing in 2024. SBFT'24 slides provided here. Tutorials information offered by SBFT'24. AIST'24 slides provided here. Tutorials information offered by AIST'24. Unfortunately, recordings for...

Talk is available online on YouTube. Slides are available on Google Slides. Abstract Fuzzing is a well-researched and understood concept, but so little of its potential is leveraged. Throughout the talk, I introduce key features of LibAFL being used to research the frontier of fuzzing. We will use this to explore...

Recording. Presentation slides available via Google Slides. Fahrplan entry on CCC website. Blurb The maintainers of the AFLplusplus open-source project show crazy new ways to (ab)use QEMU to explore difficult, binary-only targets through fuzzing. We present a proof of concept using AFL++ and QEMU to find command and...

Developers of software or designs under test in a security research context must be informed of all vulnerabilities discovered during that research within 90 days of discovery, with no exceptions. Research strategies and materials capable of discovering previously unknown or undiscoverable vulnerabilities or of...

This section contains miscellaneous publications, such as blog posts on other sites or projects that sit on some git or another somewhere. 2024 Ring Around The Regex: Lessons learned from fuzzing regex libraries 2022 Differential Fuzzing of the Solana BPF VM’s Just-in-Time Compiler and Interpreter 2021...

You may find each of the papers in this section on my ORCID page. 2025 SBFT’25 Competition Report — Fuzzing Track TWINFUZZ: Differential Testing of Video Hardware Acceleration Stacks 2024 SoK: Prudent Evaluation Practices for Fuzzing 2023 CrabSandwich: Fuzzing Rust with Rust (Registered Report) AFLrustrust: A...

This section contains recordings, slides, or other information regarding talks and presentations I've given. This is not an exhaustive list! 2025 39c3: Demystifying Fuzzer Behaviour SBFT'25: Fuzzing Competition Results TAMU Cybersecurity Club: Security Reserch in Academia 2024 Vector Automotive Cybersecurity...

Available with paywall online from ACM. Available online for free from EURECOM. Source code available on the LibAFL GitHub.