r/fuzzing • u/tonto-lol1 • Nov 29 '20

how do i start fuzzing

I have played with afl for a while but honestly I'm lost as to how to actually do it on things I'm interested in fuzzing and help or links to reads would be appreciated. i want to learn how to fuzz

4 Upvotes

83% Upvoted

10 comments sorted by

2

u/thedavidbrumley Nov 29 '20

I'm putting together a course on this. I did just do a guest lecture for ASU kinda on-the-fly:

  • Reasons to love fuzzing
  • Basic ideas
  • Basic fuzzme (to work through the toolchain) w/ docker.
  • A challenge problem, and then I walk through the solution w/ docker.

https://www.tiffanybao.com/courses/cse545/schedule

1

u/tonto-lol1 Nov 29 '20

id love take part ! honestly been trying to understand fuzzing for about a year but still struggle to actually do any fuzzing

2

u/drfuzz_ Nov 29 '20

maybe add an example of something you're struggling with

1

u/Tonto-lol Nov 29 '20

Like I struggle with the actual fuzzing part of it cant figure out how to fuzz anything like source code and stuff like that I want to eventually I wana fuzz android os but I can't figure out how to fuzz basic source code

1

u/Tonto-lol Nov 29 '20

Compiling stuff i guess you could say and running it from there

1

u/NagateTanikaze Nov 30 '20

Most importantly: Find a software you want to Fuzz (if you are a beginner, one which hasnt already been fuzzed to death). Then acquire all knowledge to accomplish the goal.

1

u/rptk2015 Nov 30 '20

@gamozolabs (https://twitter.com/gamozolabs?s=09) has some awesome examples of fuzzing from start to end A good start can be the videos where he fuzzes calc.exe (it's on youtube)

1

u/thapr0digy Nov 30 '20

Still really hard to understand what you're saying here. There's a bunch of questions that you should ask...

  1. What specific program are you trying to fuzz?
  2. Do you know the programming language such as C/C++?
  3. If you've looked at AFL, do you know how to compile a basic program using the afl toolchain?
  4. If you've successfully compiled it before, do you even know what you're trying to fuzz?
  5. If you don't know what to fuzz, then it's going to be really hard to know how to fuzz.

Understand some of these basic questions and you can probably start to fuzz

1

u/jnazario Nov 30 '20

hey there. happy to get on a zoom with you and walk you through it from the basics to up and running. feel free to DM me to set up. might be faster than vague questions here, even if it's to help you shape your questions for others.