Max Ammann issues

Results 232 issues of


                                            Max Ammann

Retry to choose similar compatible VariableData, if not found

This maybe makes a trace executable. Bette rto do random stuff than to fail early.

Client/Peer Authentification violation check in OpenSSL/LibreSSL

https://github.com/tlspuffin/tlspuffin/blob/7dc3c5c0f9665afbf4b10e89e885748b7e37efc2/tlspuffin/src/openssl/mod.rs#L154-L155 It only exists for wolfSSl right now

Craft Default/Arbitrary values for each used type

Better to to random stuff than to fail early.

New Mutation: Transcript Injection

For unused transcripts

Release libssh server bindings

We have nice libssh server bindings in this project. Let's release them!

Fix SSH Client Statefulness (MAC, Random Padding)

Allow SSH clients to be stateful somehow. Fix MAC and random padding.

long-term

SSH

Implement SSH Client Attacker

* Also cleanup the AgentDescriptors. There are usages of TLS specific flags.

Investigate memory leaks during fuzzing of wolfSSL

I observed memory leaks when fuzzing with wolfSSL

Simplify feature flags/support minimize

Verify if the minimize flag is supported properly

# Directions ## Security Violations > Focus on logical bugs, instead of memory-related ones. * [Claims-independent bug oracle](https://github.com/tlspuffin/tlspuffin/issues/148) * "matching conversation" * "fixed-cert server impersonation" * "fixed-cert client impersonation" *...