Fuzzers, analyzers, and other Gophers insecticides (Demo Time)

Presented at ToorCon San Diego 2021, Oct. 13, 2021, 3 p.m. (120 minutes).

I will demo three tools: - Go-fuzz for fuzzing Go applications - GCatch for detecting concurrency bugs in Go code - gotico, a tool currently in development for catching library-specific bugs I will demo three tools: - Go-fuzz for fuzzing Go applications - GCatch for detecting concurrency bugs in Go code - gotico, a tool currently in development for catching library-specific bugs

Presenters:

• Alex Useche
  Alex is a lead security engineer at Trail of Bits. He has over 13 years of experience in the IT industry as a software developer, security engineer, and penetration tester. As a software developer, he has worked and architected mobile and web applications in various languages and frameworks, including .NET, Objective C, and Go. Alex specializes in Go security research and is actively developing static analysis tools for discovering Go vulnerabilities.

Links:

• https://talks.toorcon.net/toorcon-2021/talk/PHDDMD/

Similar Presentations:

• ToorCon: Seattle 2011 / It's time for CBC to go
• ToorCon San Diego 2021 / Fuzzers, analyzers, and other Gophers insecticides
• Black Hat USA 2022 / Catch Me If You Can: Deterministic Discovery of Race Conditions with Fuzzing