Handcrafting weird machines

Articles

• Writing a fuzzer from scratch: Astra
• Vulnerability root-cause analysis on Linux
• WinAFL - Fuzzing Windows binaries

Talks

• Introduction to Fuzzing — Off By One Security 2026
• Hacking Satellites: From SDR to RCE — leHACK 2024
• Automated Vulnerability Hunting - Where Are We Now — SANS 2024 - Download slides

CVE

• CVE-2025-43254 - OOB-RW in MacOS libmacho.dylib
• CVE-2024-6773 - Type confusion in V8 Turboshaft
• CVE-2024-11612 - Infinite loop DoS in 7-Zip CopyCoder
• CVE-2024-53589 - Buffer overflow in GNU Objdump tekhex