Security Boulevard

There’s Always Something: Secrets Detection at Engagement Scale with Titus

TL;DR: Titus is an open source secret scanner from Praetorian that detects and validates leaked credentials across source code, binary files, and HTTP traffic. It ships with 450+ detection rules and ...
IEEE

BCFuzz: Bytecode-Driven Fuzzing for JavaScript Engines

Abstract: The interpreter and the Just-In-Time (JIT) compiler are two core components of modern JavaScript engines, both of which take bytecodes as input. Most bugs in these components are closely ...
IEEE

LLM-Guided Mutation Location Selection for Vulnerability-Aware JavaScript Engine Fuzzing

Abstract: Modern JavaScript engines employ multi-tier JIT compilation for high performance, but these aggressive optimizations often introduce subtle and hard-to-detect security vulnerabilities.
GitHub

Building an Intent-Aware Engine to Audit Massive OpenAPI Specs —Fully In-Browser

We've all been there: you drop a 15MB swagger.json file into a viewer. It takes 10 seconds to render. You search for "admin" to audit security. You find 400 matches. 398 of them are admin_id fields in ...
GitHub

Warblre: A Coq mechanization of ECMAScript regexes

This repository contains Warblre, a Coq mechanization of ECMAScript regexes. ECMAScript is the specification followed by JavaScript implementations, and a mechanization of its regex semantics makes it ...