Rust Security Audit & Fuzzing

BESTSELLER

Learn to uncover vulnerabilities and automate bug discovery — even while you sleep!

This hands-on training covers advanced Rust security techniques, including auditing, fuzzing, and crash triaging. Master tools like cargo-fuzz and AFL to secure Rust applications and stay ahead in vulnerability research.

⏳ 16 hours | 🧑‍🎓 200 students | 🔄 Last updated : 17/12/2024

 

Private Session
E-LEARNING

What you will learn

Master Rust Security Fundamentals

Understand Rust's unique security concepts like ownership, borrowing, and lifetimes, and learn to identify and address common vulnerabilities such as unsafe code, data races, and cryptographic issues.

Conduct Comprehensive Security Audits

Explore advanced Rust auditing tools and techniques to uncover logic bugs, memory leaks, and attack surfaces, ensuring robust and secure Rust applications.

Harness the Power of Fuzz Testing

Dive into coverage-guided fuzzing workflows with tools like cargo-fuzz and afl-rs, and gain expertise in analyzing crashes, minimizing corpora, and writing custom structure-aware Rust fuzzers.

What’s included ?

🔑 Immediate access to all the content
⏱️ 9.5 hours of curated and practical knowledge in video
🎞️ 80+ easy-to-digest, on-demand videos
👨‍💻 25+ hands-on exercises & labs
♾️ Lifetime access
📖 280+ digital and printable slides
📝 Assignments to apply your new skills
💯 Certificate of completion

Perfect for…

This course is for anyone who’s looking for a hands-on and pragmatic approach to audit and secure Rust code such as:

✔ Security engineers
✔ Vulnerability researchers
✔ Pentesters & Red team professionals

Content

Module 1
  • Introduction to Rust and its Ecosystem
  • Security concepts
    • Ownership, Borrowing and Lifetime
  • Rust most common vulnerabilities
    • Error handling & Unwrapping, Panicking macros, Arithmetic errors
    • Index out of bound, Stack overflow, resource exhaustion (OOM)
  • Unsafe codes
    • Tooling and Sanitizers (ASAN, MSAN, etc.)
    • Out of bound access (OOB), Use-after-free (UAF), Double free, Memory leak, Data Races and Race Conditions
  • Rust advanced vulnerabilities
    • Logic bugs, FFI, Cryptographic issues, Uninitialized & Zeroing memory
  • Attack surface discovery & Auditing tools
Module 2
  • Fuzzing Introduction and Workflow
  • Coverage-guided Fuzzing in Rust
    • cargo-fuzz, afl-rs, honggfuzz-rs
  • Improve your Fuzzing Process
    • Code coverage, Corpus selection, Corpus minimization
    • Crashes Triaging and Debugging
  • Structure-aware & Grammar-based Fuzzing
  • Other Advanced Testing techniques
    • Symbolic Execution, Formal verification
    • Differential Fuzzing
    • Writing Custom Rust Fuzzers

Prerequisite

    • Familiarity with Linux and Rust.
    • A working laptop capable of running virtual machines
    • 4GB RAM required, at a minimum
    • 40 GB free Hard disk space
    • VirtualBox
    • Administrator/root access MANDATORY

This course is suitable for people that are new to Rust. All the theory and concepts about Rust security and Rust fuzz testing will be explained during the course.

Your instructors

patrick ventuzelo webassembly security rust fuzzing

Patrick
Ventuzelo

Patrick, CEO & Founder of FuzzingLabs, has 7 years of experience training on Rust and Go, applied to fuzzing and reverse engineering.

Nabih
Benazzouz

Nabih is a security researcher that specializes in vulnerability research, fuzzing, reverse engineeringr, and secure system development.

Matthieu Christophe

Matthieu is a security engineer with experience in the energy, banking, and automotive sectors. He specializes in hardware and network security.

Tanguy
Duhamel

Tanguy, lead developer, specializes in distributed fuzzing techniques and code auditing, leveraging Rust for high-performance tools.

Pricing

Individual

$2 400
  • E-Learning
  • Self-Paced
  • On Demand
Start Learning
BEST VALUE

Teams
On Demand

Starting at
 $2 200
 per participant
  • E-Learning
  • Self-Paced
  • On Demand
Let's talk

Private Training

Starting at
 $20 000
  • Instructor led
  • In Person or Live Online
Let's talk

Trainings at Upcoming Events and Conferences

What our Students say

This course is pure gold. I wasted weeks looking for an alternative instead of taking this course directly. Huge mistake on my end because Patrick’s slides are awesome and teach everything you need to know about for Rust security exercise learning format is excellent! It’s very worth it and I highly recommend Patrick’s course!

Anonymous

Vulnerability Researcher

Very good practical training with focus on developing secure appswith Rust and fuzzing techniques, but also covers other testing methodologies. As a developer relatively new in Rust, I’ve learned a lot about general principles that should be used to develop safe applications, and various tooling built around Rust infrastructure that makes development much easier.

Alexander K.

Software Developper

I personally have learned a lot. I have to admit that this training is more for advanced Fuzzing and Rust experts or those who want to become one. I don’t have as much experience in these two topics, since I’m not a developer but a security manager. Nevertheless, I was very interested in these topic and I found the training very good! Thank you Patrick!

Irina K.

Security Manager

Past Public Trainings

Any questions about our services and trainings ?

Get in touch today with any questions that you might have.

Let's Talk

Our latest articles about Rust Security

Keep in touch with us !

email

contact@fuzzinglabs.com

X (Twitter)

@FuzzingLabs

Github

FuzzingLabs

LinkedIn

FuzzingLabs

email

contact@fuzzinglabs.com

X (Twitter)

@FuzzingLabs

Github

FuzzingLabs

LinkedIn

FuzzingLabs