How I used o3 to find a remote 0-day vulnerability in the Linux kernel (ksmbd)

Greybox Automatic Exploit Generation for Heap Overflows in Language Interpreters

Automation in Exploit Generation with Exploit Templates

Tracking Down Heap Overflows with rr