HTB University Writeup – Hacking StarGazer in HTB CTF
|

HTB University Writeup – Hacking StarGazer in HTB CTF

ByFuzzingLabs

HTB UNIVERSITY Writeup Solidity Shenanigans: Hacking StarGazer in HTB CTF In mid-December, our school team, Phreaks 2600, participated in the HTB University CTF. Among the challenges featured in the competition was one titled “StarGazer,” classified as the Hard challenge of the Blockchain category. This challenge focused on Solidity and explored the concepts of UUPSUpgradeable and…

Introduction to modern memory management
|

Introduction to modern memory management

ByFuzzingLabs

Memory management Introduction to modern memory management The goal of this article is to present the functioning of volatile memory in general on our modern computers. Physical Organization Before discussing volatile memory, it is important to understand the basics of how a computer operates. A PC is composed of several electronic components and peripherals that…

Ph0wn2024 Writeup – Race Roller​ Application reversing
| |

Ph0wn2024 Writeup – Race Roller​ Application reversing

ByFuzzingLabs

Ph0wn2024 Writeup Race Roller Application reversing The Ph0wn 2024 CTF was a hacking challenge specialized in smart-devices and low-level softwares.This event took place on November 30th in the south of France. It is a very original CTF because we had very original challenges such as hacking EV3 Lego robots or Pico PCB. In this article…

Attacking Reasoning models​
|

Attacking Reasoning models​

ByNabih Benazzouz

DeepSeek R1 & Claude LLM vulnerabilities Attacking Reasoning models In recent months, reasoning models have gained significant attention, particularly with the emergence of DeepSeek R1, which aim to improve logical consistency and step-by-step problem-solving in LLMs. At the core of these advancements is Chain of Thought (CoT) reasoning, a technique that enables models to break…

BGP Under Pressure : Protocol Fuzzing in action
| |

BGP Under Pressure : Protocol Fuzzing in action

ByNabih Benazzouz

BGP Under Pressure Protocol Fuzzing in action When it comes to keeping the internet running smoothly, the Border Gateway Protocol (BGP) is absolutely essential. BGP is the backbone of how routers share the best paths for data across different networks. Given its importance, even small bugs can cause big headaches. That’s why we’ve been busy…

Breaking Down the Baseband​ : Shannon in a nutshell
| | | |

Breaking Down the Baseband​ : Shannon in a nutshell

ByJ.

Breaking Down the Baseband Shannon in a nutshell Over the past 30 years, technology has revolutionized communications. Mobile phones, now owned by about 80% of people worldwide, have become our constant companions and the most widely adopted innovation after television. These devices rely on complex network standards implemented through specialized processors. Like all software, this…

How Fuzzing Could Have Prevented the zkLend Hack​
| | | |

How Fuzzing Could Have Prevented the zkLend Hack​

ByNabih Benazzouz

rediscovery of the starknet zklend hack How Fuzzing Could Have Prevented the zkLend Hack The recent zkLend hack has stirred up significant discussion in the community, and today we’d like to share some insights from our deep dive into the vulnerability using fuzzing techniques at FuzzingLabs. Our investigation reveals that a simple fuzzing test could…

Story Security Assessment Completed
| | | | |

Story Security Assessment Completed

ByNabih Benazzouz

Story / Security Assessment Completed Strengthening Blockchain-Based IP Management At FuzzingLabs we recently completed a comprehensive security assessment of Story, a decentralized network that aims to revolutionize intellectual property (IP) management. This audit was undertaken to ensure the security and resilience of its blockchain-based infrastructure, smart contracts, and consensus mechanisms. Below, we provide an overview…

DOS in DeFi Liquidity Pools: The Initialization Vulnerability
| | |

DOS in DeFi Liquidity Pools: The Initialization Vulnerability

ByNabih Benazzouz

Denial Of Service in DeFi Liquidity Pools The Initialization Vulnerability Decentralized Exchanges (DEXs) have become a cornerstone of the DeFi ecosystem, processing billions in daily trading volume. However, during our recent security research at FuzzingLabs we uncovered a subtle yet significant vulnerability pattern that affects multiple DEX implementations. This vulnerability allows malicious actors to effectively…

offensivecon 2025 browser fuzzing binary gecko
| | | | | |

OffensiveCon 2025 – Practical Browser Fuzzing On-site Training

ByLeane

OffensiveCon 2025 – Training Announcement Practical Web Browser Fuzzing Training Kickstart your journey into the intricate world of web browser fuzzing at OffensiveCon 2025! This exclusive training, led by experts Patrick Ventuzelo and Tanguy Duhamel, is your opportunity to master advanced fuzzing techniques and uncover vulnerabilities in some of the most widely used software globally….