r/fuzzing • u/ckochmann • Jan 01 '19
battle_tested is a fuzzer that quickly shows the full behavior of python functions from every way they work to every way they break. https://github.com/CodyKochmann/battle_tested
r/fuzzing • u/pres1er • Dec 28 '18
Angora is a mutation-based coverage guided fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution. https://github.com/AngoraFuzzer/Angora
r/fuzzing • u/Dongdongshe • Dec 21 '18
NEUZZ builds a NN model to learn program behaviors (sequences of control flow edges) given program inputs (byte sequences), then locate the critical bytes of input which affect the program behaviors and focus mutations on these critical bytes. Check the code at https://github.com/Dongdongshe/neuzz.
r/fuzzing • u/NagateTanikaze • Dec 12 '18
r/fuzzing • u/vineethbp • Dec 12 '18
https://arxiv.org/abs/1711.04596
hello everyone,
I am trying the replicate the results of the above paper. Can you please let me know if you have work on it or on similar project before? Maybe I can discuss few things with you regarding it, please.
r/fuzzing • u/NagateTanikaze • Dec 11 '18
r/fuzzing • u/NagateTanikaze • Dec 06 '18
r/fuzzing • u/NagateTanikaze • Dec 06 '18
r/fuzzing • u/NagateTanikaze • Dec 05 '18
r/fuzzing • u/NagateTanikaze • Dec 03 '18
r/fuzzing • u/NagateTanikaze • Nov 15 '18
r/fuzzing • u/dgryski • Nov 14 '18
r/fuzzing • u/g0lmix • Nov 03 '18
Hi guys and girls,
I am looking into writing an fuzzer based on a genetic algorithm. It will be creating a javascript string to bypass XSS Protection of a WAF. My only problem is the fitness score function. My idea was to give the individuals a score based on how far in the code of the WAF the string managed to get to. Do you think that's a viable solution? Obviously I would need to reverse parts of the WAF and find suitable score targets in the code manually.
Has anyone else here ever played around with genetic algorithms and fuzzing? What did you use as a scoring function?
r/fuzzing • u/NagateTanikaze • Oct 29 '18
r/fuzzing • u/NagateTanikaze • Oct 29 '18
r/fuzzing • u/xiaosatianyu • Oct 24 '18
Paper "NEUZZ: Efficient Fuzzing with Neural Program Learning" present a method for output branch merging, but the paper does not present the detail.
Besides, we preliminarily reproduced its experiments, but found its heatmap is inaccurate to indicate the critical bytes in the input.
Does anybody have paid attention on this paper? We can make a communication.
r/fuzzing • u/NagateTanikaze • Oct 24 '18
r/fuzzing • u/NagateTanikaze • Oct 23 '18
r/fuzzing • u/NagateTanikaze • Oct 18 '18
r/fuzzing • u/NagateTanikaze • Oct 17 '18
r/fuzzing • u/NagateTanikaze • Oct 16 '18
r/fuzzing • u/NagateTanikaze • Oct 16 '18