David Korczynski

@Davkorcz

researcher @ADALogics | Software security, fuzzing, vulnerability analysis, AI, open source. | CS PhD from @CompSciOxford

Oxford, England

github.com/DavidKorczynski

Replies Reposts Media

Pinned
David Korczynski
@Davkorcz
Oct 30, 2023
Made a video on open source fuzzing introspection and how you can analyze the fuzzing set up of OSS-Fuzz projects using introspector.oss-fuzz.com -- youtu.be/RLoLfo2V2HI e.g. track coverage progress, find interesting targets and more!
David Korczynski
@Davkorcz
May 27, 2025
Automating OSS-Fuzz integrations with an agentic approach to build generation blog.oss-fuzz.com/posts/oss-fuzz… #Fuzzing at scale needs a solution for build script generation and an LLM-based agentic approach looks promising. It naturally works well with OFGs harness gen capabilities 🤟
blog.oss-fuzz.com
OSS-Fuzz integrations via agent-based build generation
OSS-Fuzz integrations via agent-based build generation.
David Korczynski
@Davkorcz
Feb 18, 2025
Auto generating #fuzzing harnesses by way of program analysis and #LLMs! New blog post "Minimal LLM-based fuzz harness generator": adalogics.com/blog/minimal-l… We show how you can generate a sophisticated fuzz harness synthesis tool with a few lines of code.
David Korczynski
@Davkorcz
Feb 14, 2025
"Fuzz Introspector: enabling rapid fuzz introspection tool development" -- a new blog post on Fuzz Introspector and how it is moving into supporting analysis as a pure python library. adalogics.com/blog/fuzz-intr… Also, follow me bluesky: bsky.app/profile/davkor… #fuzzing
David Korczynski
@Davkorcz
Nov 20, 2024
#Fuzzing harnesses generated using #LLMs uncover 26 new vulns and a CVE in #OpenSSL! Super interesting direction for the intersection of AI and security -- lot's more to uncover as well! It's open source too: github.com/google/oss-fuz…
Oliver Chang
@halbecaf
Nov 20, 2024
New blog post about OSS-Fuzz AI-powered fuzzing is live! We talk about what went into making LLMs work well enough for this use case to find 26 new vulnerabilities (including a CVE in OpenSSL), as well as what else we have planned to make this better. security.googleblog.com/2024/11/leveli…