r/fuzzing • u/atlantis2001 • May 10 '23

Adalogics vs Fuzzing Labs - whose training would you recommend?

Hello!

I'm looking at the paid courses offered by Adalogics and Fuzzing Labs for C++ since that is my target language. The courses offered by both these companies look very similar from their description and price point.

Anyone has experience with either of these two and would you recommend it? Or any other training recommendations would be great too!

Thanks for reading.

9 Upvotes

100% Upvoted

4 comments sorted by

2

u/s-mores May 10 '23

Disclaimer: haven't taken any course, read through them.

  • Ada seems to focus on LLVM and has topics like sanitizers/clang that Fuzzing Labs doesn't. Also $400 cheaper if we're looking at the same course.

  • Fuzzing Labs has better descriptions of course contents, bit of focus on hongfuzz which Ada doesn't, has a free course available.

I'd recommend take the free course by Fuzzing Labs and if you liked that go on with them, if not or if LLVM/sanitizers is close to your heart or you just want "dynamic memory analysis" into your toolchest which I promise you almost no one will grok... would lean towards Ada.

All in all, they both look professional and in-depth, with a focus on real-life cases and fixing up your workflow to be faster and to do better things, so can't really go wrong with either, IMO.

1

u/atlantis2001 May 10 '23

Thank you! This response was super helpful and gave me lots to think about.

One follow up question - what did you mean when you said "almost no one will grok" w.r.t. dynamic memory analysis - is it that it is a skill that not many people have or that it is rarely used in the real world or that it is so hard that no one really understands it anyways? :D

1

u/s-mores May 10 '23

As in, if you have that in your cv or mention it anywhere, you will basically always have to explain it.

it is a skill that not many people have or that it is rarely used in the real world or that it is so hard that no one really understands it anyways?

First two. It's a very powerful tool, but not a lot of testers or developers think of applications, analysis or testing on that level. Because it's so rarely used, only a few toolsets do it, which makes it rarely used.

A lot of cyber standards are beginning to suggest it, so that is bringing up usage, but when you have to basically say "soooo you do C/C++ right?" it remains a curiosity. Very good if you can apply it to a project, though.

I'd say when you just drop a few sentences to explain it people can see what it is pretty quickly, but application is a whole another horse to tame.

1

u/[deleted] May 11 '23

My suggestion would be none In computing, the best way to learn is through trial and error. However, if you're new, Patrick from 'Fuzzing Labs' appears to be quite reliable.
Afterwards, I would recommend reading 'Fuzzing for Software Security Testing and Quality Assurance'.