Imagen de Portada

Triggering and Detecting Exploitable Library Vulnerability from the Client by Directed Greybox Fuzzing

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Zhao, Yukai, Wu, Menghan, Hu, Xing, Wang, Shaohua, Luo, Meng, Xia, Xin
Formato:	Preprint
Publicado:	2026
Materias:	Cryptography and Security Software Engineering
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

ChainFuzzer: Greybox Fuzzing for Workflow-Level Multi-Tool Vulnerabilities in LLM Agents
por: Wu, Jiangrong, et al.
Publicado: (2026)

Harnessing Large Language Models for Seed Generation in Greybox Fuzzing
por: Shi, Wenxuan, et al.
Publicado: (2024)

QUIC-Fuzz: An Effective Greybox Fuzzer For The QUIC Protocol
por: Ang, Kian Kai, et al.
Publicado: (2025)

Uncover the Premeditated Attacks: Detecting Exploitable Reentrancy Vulnerabilities by Identifying Attacker Contracts
por: Yang, Shuo, et al.
Publicado: (2024)

Beyond Imprecise Distance Metrics: Trace-Guided Directed Greybox Fuzzing via LLM-Predicted Call Stacks
por: Zhang, Yifan, et al.
Publicado: (2025)

LLAMAFUZZ: Large Language Model Enhanced Greybox Fuzzing
por: Zhang, Hongxiang, et al.
Publicado: (2024)

Exploiting LLM Agent Supply Chains via Payload-less Skills
por: Liu, Xinyu, et al.
Publicado: (2026)

Smart Contract Fuzzing Towards Profitable Vulnerabilities
por: Kong, Ziqiao, et al.
Publicado: (2025)

Many Tools, Few Exploitable Vulnerabilities: A Survey of 246 Static Code Analyzers for Security
por: Hermann, Kevin, et al.
Publicado: (2026)

Multi-Agent Collaborative Fuzzing with Continuous Reflection for Smart Contracts Vulnerability Detection
por: Chen, Jie, et al.
Publicado: (2025)

Fixing Security Vulnerabilities with AI in OSS-Fuzz
por: Zhang, Yuntong, et al.
Publicado: (2024)

A Large-scale Empirical Study on the Generalizability of Disclosed Java Library Vulnerability Exploits
por: Chen, Zirui, et al.
Publicado: (2026)

SAND: Decoupling Sanitization from Fuzzing for Low Overhead
por: Kong, Ziqiao, et al.
Publicado: (2024)

An Empirical Study of Vulnerable Package Dependencies in LLM Repositories
por: Liu, Shuhan, et al.
Publicado: (2025)

FuzzAgent: Multi-Agent System for Evolutionary Library Fuzzing
por: Lyu, Yunlong, et al.
Publicado: (2026)

Similar but Patched Code Considered Harmful -- The Impact of Similar but Patched Code on Recurring Vulnerability Detection and How to Remove Them
por: Tan, Zixuan, et al.
Publicado: (2024)

A Comprehensive Study of Exploitable Patterns in Smart Contracts: From Vulnerability to Defense
por: Ding, Yuchen, et al.
Publicado: (2025)

AFLGopher: Accelerating Directed Fuzzing via Feasibility-Aware Guidance
por: Bai, Weiheng, et al.
Publicado: (2025)

Scheduzz: Constraint-based Fuzz Driver Generation with Dual Scheduling
por: Li, Yan, et al.
Publicado: (2025)

SoK: Where to Fuzz? Assessing Target Selection Methods in Directed Fuzzing
por: Weissberg, Felix, et al.
Publicado: (2025)

BandFuzz: An ML-powered Collaborative Fuzzing Framework
por: Shi, Wenxuan, et al.
Publicado: (2025)

Learning-based Models for Vulnerability Detection: An Extensive Study
por: Ni, Chao, et al.
Publicado: (2024)

DyMA-Fuzz: Dynamic Direct Memory Access Abstraction for Re-hosted Monolithic Firmware Fuzzing
por: Farrelly, Guy, et al.
Publicado: (2026)

PBFuzz: Agentic Directed Fuzzing for PoV Generation
por: Zeng, Haochen, et al.
Publicado: (2025)

FuzzSlice: Pruning False Positives in Static Analysis Warnings Through Function-Level Fuzzing
por: Murali, Aniruddhan, et al.
Publicado: (2024)

PatchFuzz: Patch Fuzzing for JavaScript Engines
por: Wang, Junjie, et al.
Publicado: (2025)

Does the Vulnerability Threaten Our Projects? Automated Vulnerable API Detection for Third-Party Libraries
por: Zhang, Fangyuan, et al.
Publicado: (2024)

Prompt Fuzzing for Fuzz Driver Generation
por: Lyu, Yunlong, et al.
Publicado: (2023)

Large Language Model assisted Hybrid Fuzzing
por: Meng, Ruijie, et al.
Publicado: (2024)

Belobog: Move Language Fuzzing Framework For Real-World Smart Contracts
por: Kong, Ziqiao, et al.
Publicado: (2025)

Game Rewards Vulnerabilities: Software Vulnerability Detection with Zero-Sum Game and Prototype Learning
por: Wen, Xin-Cheng, et al.
Publicado: (2024)

VulEval: Towards Repository-Level Evaluation of Software Vulnerability Detection
por: Wen, Xin-Cheng, et al.
Publicado: (2024)

Zero-Shot Vulnerability Detection in Low-Resource Smart Contracts Through Solidity-Only Training
por: Hu, Minghao, et al.
Publicado: (2026)

An Empirical Study on the Distance Metric in Guiding Directed Grey-box Fuzzing
por: Wen, Tingke, et al.
Publicado: (2024)

MegaVul: A C/C++ Vulnerability Dataset with Comprehensive Code Representation
por: Ni, Chao, et al.
Publicado: (2024)

MobFuzz: Adaptive Multi-objective Optimization in Gray-box Fuzzing
por: Zhang, Gen, et al.
Publicado: (2024)

FuzzingBrain V2: A Multi-Agent LLM System for Automated Vulnerability Discovery and Reproduction
por: Sheng, Ze, et al.
Publicado: (2026)

Knowdit: Agentic Smart Contract Vulnerability Detection with Auditing Knowledge Summarization
por: Kong, Ziqiao, et al.
Publicado: (2026)

FuzzySQL: Uncovering Hidden Vulnerabilities in DBMS Special Features with LLM-Driven Fuzzing
por: Chen, Yongxin, et al.
Publicado: (2026)

CKGFuzzer: LLM-Based Fuzz Driver Generation Enhanced By Code Knowledge Graph
por: Xu, Hanxiang, et al.
Publicado: (2024)