Go Security Audit & Fuzzing

Master Go Security and Fuzzing with Confidence

This practical training dives into advanced Go security auditing and fuzz testing, teaching you to uncover vulnerabilities, debug crashes, and enhance application resilience. Gain hands-on experience with tools like go-fuzz and master the techniques needed to address real-world security challenges.

⏳ 16 hours | 🧑‍🎓 100+ students | 🔄 Last updated: 27/01/2025

What you will learn

Understanding Go's Security and Common Vulnerabilities

The course provides a comprehensive overview of the Go ecosystem, focusing on security concepts such as memory safety, concurrency, and error handling. Participants will also learn about common vulnerabilities, including panicking functions and logic errors, to better understand the language's potential weaknesses.

Mastering Go Fuzzing and Advanced Testing Techniques

Participants will dive into fuzz testing, including coverage-guided fuzzing, corpus management, and crash analysis. Advanced techniques like property-based testing, grammar-based fuzzing, and differential fuzzing will be explored to uncover vulnerabilities such as out-of-bounds panics, SIGSEGV errors, and resource exhaustion.

Analyzing Crashes and Debugging Complex Issues

The course teaches how to analyze and debug crashes effectively by identifying root causes through crash minimization, bucketing, and debugging techniques. It also addresses advanced vulnerabilities such as unsafe code, data races, memory leaks, and concurrency issues, ensuring participants can handle real-world scenarios.

What’s included ?

🔑 Immediate access to all the content
⏱️ 9.5 hours of curated and practical knowledge in video
🎞️ 80+ easy-to-digest, on-demand videos
👨‍💻 25+ hands-on exercises & labs
♾️ Lifetime access
📖 280+ digital and printable slides
📝 Assignments to apply your new skills
💯 Certificate of completion

Perfect for…

This course is for anyone who’s looking for a hands-on and pragmatic approach to audit and secure Rust code such as:

✔ Security engineers
✔ Vulnerability researchers
✔ Pentesters & Red team professionals

Content

Module 1 – Go Security Audit and Code Review 

  • Introduction to Go and its Ecosystem
  • Security concepts
    • Memory safety,  Garbage collector
    • Error handling, Concurrency
  • Golang common vulnerabilities
    • Panicking function
    • Arithmetic errors
    • Out-of-bounds panics
    • SIGSEGV / Nil pointer dereference
    • Resource exhaustion / OOM, Stack overflow
  • Advanced vulnerabilities
    • Unsafe code
    • Data races, Race conditions, 
    • Memory Leak, Logic errors, Concurrency issues
    • Web App Vulnerabilities (SQLI, XSS, etc.)
  • Attack surface discovery & Auditing tools

Module 2 – Go Fuzzing & Crash Analysis

  • Introduction to Fuzzing
  • Coverage-guided Fuzzing
    • go-fuzz, libfuzzer,  testing/fuzz
  • Fuzz testing workflow
    • Corpus/inputs collection, Code coverage
    • Corpus minimization
  • Crashes Analysis
    • Bucketing, Crashes minimization, Debugging, Root cause analysis
  • Generation-based fuzzing
    • Grammar-based & Structure-aware Fuzzing
  • Advanced testing techniques
    • Property-based testing, Concolic Testing
    • Differential fuzzing / Writing custom fuzzers

Prerequisite

  • Familiarity with Linux and Go.
  • A working laptop capable of running virtual machines
  • 4GB RAM required, at a minimum
  • 40 GB free Hard disk space
  • VirtualBox
  • Administrator/root access MANDATORY

This course is suitable for people that are new to Go. All the theory and concepts about Go security and Go fuzz testing will be explained during the course.

Your instructors

patrick ventuzelo webassembly security rust fuzzing

Patrick
Ventuzelo

Patrick, CEO & Founder of FuzzingLabs, has 7 years of experience training on Rust and Go, applied to fuzzing and reverse engineering.

Pricing

Individual

$2 400
  • E-Learning
  • Self-Paced
  • On Demand
BEST VALUE

Teams
On Demand

Starting at
$2 200
per participant
  • E-Learning
  • Self-Paced
  • On Demand

Private Training

Starting at
$20 000
  • Instructor led
  • In Person or Live Online

Trainings at Upcoming Events and Conferences

What our Students say

Really complete training if you’re starting to write and audit Go code. I’ve already applied and used the fuzzing tools and techniques against Blockchain code and I directly found multiple bugs! Thanks Patrick!

Anonymous

Blockchain Engineer

The course contains a lot of information to be completely processed but it’s well built and very practical! My favorite part was about fuzzing!

Thomas H.

Software Engineer

I was impressed with the quality of Go training on many levels. The slides exceeded my expectations and the videos really motivated me to finish the course entirely! Of course, It costs a certain budget but it’s definitely worth the investment.

Anonymous

Security Engineer

Past Public Trainings

Any questions about our services and trainings ?

Get in touch today with any questions that you might have.

Our latest articles about Go Security

Keep in touch with us !

email

contact@fuzzinglabs.com

X (Twitter)

@FuzzingLabs

Github

FuzzingLabs

LinkedIn

FuzzingLabs

email

contact@fuzzinglabs.com

X (Twitter)

@FuzzingLabs

Github

FuzzingLabs

LinkedIn

FuzzingLabs