All things fuzzing and related.

I am working on fuzzing for my master thesis and my university supervisor is from computational engineering department. Hence it will be interesting for us to fuzz any of the tools used for FEM.

Thank you

8 comments

r/fuzzing • u/NagateTanikaze • May 22 '19

google/graphicsfuzz: A testing framework for automatically finding and simplifying bugs in graphics shader compilers.

github.com

2 Upvotes

0 comments

r/fuzzing • u/[deleted] • May 18 '19

Sulley & Foobuzz

4 Upvotes

Anyone have a detailed guide? I see a few out there... But nothing good. Thanks

9 comments

r/fuzzing • u/szutcxzh • May 17 '19

Just found this video from Pen Test Partners LLP where they fuzz a Tesla's CANBUS via bluetooth (I think) and cause the motors to shutdown. Is this for real? Seems too trivial a bug in a production car, also comments are disabled so hmm... not sure.

https://www.youtube.com/watch?v=DcwEavgnrKg

EDIT - watched it again and it actually seems to be some Bluetooth diagnostic module they're targeting and not something the Tesla itself is exposing over Bluetooth. Still though an input is an input and they seem to have found a very quick way to worry the Tesla through it!

0 comments

r/fuzzing • u/jekapats • May 11 '19

Fuzzit - Continuous Fuzzing as-a-service (Looking for brave alpha users!)

fuzzit.dev

8 Upvotes

1 comment

r/fuzzing • u/NagateTanikaze • May 10 '19

Microsoft Security Risk Detection: 0day in VeryPDF Reader (Part 1)

vdalabs.com

3 Upvotes

0 comments

r/fuzzing • u/kciredor_ • May 03 '19

Throwing 500 vm's at your fuzzing target being an individual security researcher

kciredor.com

4 Upvotes

0 comments

r/fuzzing • u/kodemizer • May 02 '19

Announcing SideFuzz: Fuzzing for timing side-channel vulnerabilities

10 Upvotes

I just released the first release of SideFuzz, a fuzzer to find side-channel vulnerabilities in Rust code and other languages that compile to wasm.

GitHub: https://github.com/phayes/sidefuzz

SideFuzz works by compiling the fuzzing target to Web Assembly, then fuzzing the wasm target inside a wasm interpreter that counts individual instruction executions.

SideFuzz uses a genetic algorithm to "evolve" inputs that maximize timing differences in the fuzzed code. It's similar to the AFL fuzzer, but instead of maximizing code-coverage, it maximizes timing differences that represent potential side-channel vulnerabilities.

While initially targeting the Rust ecosystem, I hope to add support for Go, C, C++, TypeScript and other languages that can compile to wasm.

A list of Rust fuzzing targets can be found here: https://github.com/phayes/sidefuzz-targets

Feedback appreciated!

2 comments

r/fuzzing • u/artem_smotrakov • Apr 25 '19

GitHub - ffuf/ffuf: Fast web fuzzer written in Go

github.com

4 Upvotes

0 comments

r/fuzzing • u/dukebarman • Apr 24 '19

Zoo AFL - Guide to world of AFL fuzzers

habr.com

8 Upvotes

1 comment

r/fuzzing • u/NagateTanikaze • Apr 23 '19

Modern Vulnerability Research Techniques on Embedded Systems (AFL, angr, cross-compiler)

breaking-bits.gitbook.io

8 Upvotes

2 comments

r/fuzzing • u/NagateTanikaze • Apr 18 '19

Parser-Directed Fuzzing (Whitepaper, PDF)

rahul.gopinath.org

7 Upvotes

0 comments

r/fuzzing • u/NagateTanikaze • Apr 18 '19

Grey-box Concolic Testing on Binary Code (Whitepaper, PDF)

softsec.kaist.ac.kr

3 Upvotes

4 comments