Check reachability before you fuzz for a CVE
When I pick a known CVE to re-find by fuzzing, the question that matters isn't how bad the bug is or who found it. It's how many conditions a fuzzer has…
Notes
Short notes
One idea each: how I actually run agents, fuzzing and recon day to day. Longer writeups live on the blog.
All notes
2 notesherdr + omp: my terminal setup for agent-driven security work
Two tools do most of my agent work now. omp (oh my pi, a fork of Mario Zechner's Pi) is the coding agent. herdr is the terminal it lives in. They solve…