Our team found a Poseidon hash collision in Solana's Agave VM crypto syscall.
Two distinct byte inputs → same field element → same Poseidon output. Affects both Agave and Firedancer via implicit padding paths.
Full write-up:
fuzzinglabs.com/solana-agave…
Good job by @Ectari0
Day 3 (out of 4) of our "Reversing Modern Binaries" training at REcon Montreal is kicking off!
👨🏫The energy and insights from this group have been amazing.
Couldn't join us in Montreal? Your next chance is coming up at the @POC_Crew conference in Seoul this November! 🇰🇷
🚨 FINAL CALL! There are only 5 days left to get the early-bird discount. Register before June 30th to get the discount.
Discover the Seoul training program👉 fuzzinglabs.com/p0c-2025-rev…
Register👉powerofcommunity.net/#regist…#ReverseEngineering#InfoSec#Training#REcon#Montreal#POC2025#Seoul#Rust#Go
Uncovering Hidden Threats in Ethereum Virtual Machines 🚨
At #Zer0Con2025, we exposed critical vulnerabilities in Ethereum Virtual Machines (EVMs) using fuzzing. Here’s what you need to know 🧵👇
#Ethereum#EVM#Fuzzing#BlockchainSecurity
🔥Introducing Arion🔥
A high-performance C framework for emulating executable binaries.
Based on Unicorn and inspired by Qiling, Arion offers an easy-to-use interface and super low execution times making it a great ally for fuzzing or other applications.
github.com/h311d1n3r/Arion
‼️ FuzzingLabs will be at @reconmtl 2025 in Montreal this June
Join us for 3 hands-on, in-depth trainings from 23rd–26th of June 2025.
🔍 Reversing Modern Binaries : Practical Rust & Go Analysis: fuzzinglabs.com/recon-2025-r…
🛠 Fuzzing Windows Userland Applications: fuzzinglabs.com/recon-2025-f…
🦀 Rust Development for Cybersecurity: fuzzinglabs.com/recon-2025-r…
Secure your spot now!
Just wrote a new blog post about rust symbol recovery, this time targeting cross-compiled targets !
Here is the blog post: nofix.re/posts/2024-23-05-ru…
I also updated rustbinsign/rustbininfo to identify and handle MinGW targets accordingly.
Hi friendz ! 🧙♂️
- Prochain Stream ce Mardi 18 Juin à 21h ! 🕯️
- Topic : Reversing RUST Vs CPP Vs C ! 🤔
On part sur 2h sur quelques bases, les différences fondamentales entre les technologies proposées, et les approches de nos différents invités, à savoir @N0Fix, @mhoste1, et @lxt33r ! 😎😎😎
A très vite pour se casser le crane sur du low level ! 🤙🛠️
discord.gg/tH8wEpNKWStwitch.tv/thelaluka
I just wrote a blog post and made a tool about my journey into recovering symbols from KrustyLoader, a malware written in rust @ektoplasma_ from @Synacktiv analyzed not long ago. Check it out if you are into rust reverse engineering ! 😁
nofix.re/posts/2024-11-02-ru…
This weekend we played @HacksInTaiwan CTF 2023. The challenges were amazing and we finished 13th. Congratulations to @Water_Paddler and @pb_ctf for absolutely nailing the scoreboard 💪
Cerberus v1.2 is out ! The tool can now recover symbols of stripped Go binaries in addition to Rust. The rate is still of ~90%. 🔥I am open to any feedback🔥
github.com/h311d1n3r/Cerberu…
Our contributors are on fire🔥: we've got another 2 new challenges for you to discover, this time in the Web-Client category 🎉:root-me.org/en/breve/New-cha…
Thanks to the authors: @Ruulian_, @mhoste1, @lxt33r 👏👏👏!