Skip to content
View glitchfox's full-sized avatar

Block or report glitchfox

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
glitchfox/README.md

glitchfox

Vulnerability research & reverse engineering — C/C++ memory safety, fuzzing, binary analysis. Real name: Benjamin Ali. · benjaminali.com

I hunt memory-safety and denial-of-service bugs in C/C++ open-source software — writing coverage-guided fuzzing harnesses, reverse-engineering binaries, and building the tooling around both. Findings go to maintainers privately, with minimal reproducers and verified fixes.

Focus

  • Parsers of untrusted input — media codecs, file formats, protocols
  • Reverse engineering & binary analysis for what source-level fuzzing can't reach
  • Root-causing to a one-line, verified fix — not just a crash

Recent work includes a heap out-of-bounds read in dr_flac (mackron/dr_libs#318).

Contactglitchfox@benjaminali.com · PGP: benjaminali.com/security

Popular repositories Loading

  1. glitchfox glitchfox Public

    Benjamin Ali (glitchfox) — security research

  2. Hello-World Hello-World Public

    Forked from octocat/Hello-World

    My first repository on GitHub!

  3. libnfs libnfs Public

    Forked from sahlberg/libnfs

    NFS client library

    C

  4. libsmb2 libsmb2 Public

    Forked from sahlberg/libsmb2

    SMB2/3 userspace client

    C

  5. zbar zbar Public

    Forked from mchehab/zbar

    ZBar is an open source software suite for reading bar codes from various sources, including webcams. As its development stopped in 2012, I took the task of keeping it updated with the V4L2 API. Thi…

    C

  6. wildmidi wildmidi Public

    Forked from Mindwerks/wildmidi

    WildMIDI is a simple software midi player which has a core softsynth library that can be used with other applications.

    C