Phase 1: Entrapment

"Make money with computers!"

Phase 1: Entrapment

"contribute and earn"

TryTLS

Does Your Library Check TLS Certificates Properly?

Click the image to access the project or down-arrow for details

TryTLS

Does Your Library Check TLS Certificates Properly?

TryTLS

Example Stub

import sys
import requests

if len(sys.argv) < 3 or len(sys.argv) > 4:
    exit("Usage: %s <HOST> <PORT> [CA_FILE]" % sys.argv[0])

host = sys.argv[1]
port = sys.argv[2]
verify = sys.argv[3] if len(sys.argv) > 3 else True

try:
    r = requests.get("https://" + host + ":" + port, verify=verify)
except requests.exceptions.SSLError as err:
    print("REJECT")
else:
    print("ACCEPT")

TryTLS

Shootout - checking distro & language combos

TryTLS

Reaching Out

TryTLS

• Affected at least 3 languages and 2 distros

• Rustls proud of their work

TryTLS

Looks like TryTLS made it

Libfuzzerfication

Fuzzing for the Rest of Us

Click the image to access the project or press down-arrow for details

Libfuzzerfication

How does it work?

Pull container from Dockerhub

Start Writing your own libfuzzer stub

Share the Dockerfile with other users

Use libFuzzer to collect corpus so that other people can continue where you left off

You can start writing stubs without docker.

Libfuzzerfication

Indeed, we used Docker also. :) To make the project easy to approach.

(Watch out the volume mounts though)

Click the image to watch tutorial screencast

URLHandlers

Discover and Hack URL handlers

Click the image to access the project or press down-arrow for details

URLHandlers

Introduction to the problem

Click the image to access the video

URLHandlers

Introduction to the problem

Click the image to access the video

URLHandlers

Reaching out

URLHandlers

Crowdsourcing

URLHandlers

Seems to live its own life now as well

19 Open Sessions 

• 150+ encounters

• 60+ people

• 23+ organisations (academia and industry)

Press down-arrow for videos from open-sessions

19 Open Sessions 

19 Open Sessions 

>Read the Whitepaper

19 Open Sessions 

> 1 Ph.d, 1 M.Sc, 2 B.Sc.