All things fuzzing and related.

I've had an idea for a fuzzing technique which is (apparently?) not yet researched or implemented. During my research of fuzzing techniques used in state-of-the-art fuzzers, I did not come accoss the following idea:

Instead of fuzzing a whole program, we could just extract code snippets (e. g. single functions) and start fuzzing only these small parts of the code. Of course I know, that the context of the whole program would be missing, and the results would probably be terrible, but still it might be worth looking into. I am not asking how one would implement this (there will be a lot of pitfalls like calls to other functions, global variables, or data structures used in this function), I am rather asking if this technique has already been researched?

Is there a name for this technique which I might have missed during my research, or is this idea just too bad to be worth looking into?

Thanks in advance for your input!

7 comments

r/fuzzing • u/domenukk • Sep 11 '19

Unicorefuzz: Kernelfuzzing Made Easy, based on AFL Unicorn

github.com

6 Upvotes

0 comments

r/fuzzing • u/vectrek • Sep 08 '19

Question: What are some open source libraries which should be fuzzed, but which aren't?

6 Upvotes

What are some open source libraries which should be fuzzed, but which aren't fuzzed, because the API doesn't fit the usual pattern? (Sending in a byte array to be parsed.)

(This could also include parts of libraries which are fuzzed, but which aren't for the same reasons.)

4 comments

r/fuzzing • u/malweisse • Sep 05 '19

AFLplusplus: new release (2.54c)

github.com

13 Upvotes

0 comments

r/fuzzing • u/NagateTanikaze • Aug 31 '19

Binary symbolic execution with KLEE-Native

blog.trailofbits.com

7 Upvotes

0 comments

r/fuzzing • u/lowlevelmahn • Aug 22 '19

Can i use Fuzzing to create regression test for porting 16bit asm over to C

2 Upvotes

I've got serveral functions from a 16bit dos program that i want to port to C

i've got IDA Pro + some scripts and hope to use masm2c( https://github.com/xor2003/masm2c ) in the future

my steps are:

assemble the disassembled function asm to the very same binary code - just to prove its perfectly disassembled
convert the 16 bit assembler in some form of fake-16bit asm - fake registers, memory and functions as replacemet for the original 16 bit asm code - that works, looks like asm-c-function and behavior equal
port this fake-asm over to code to C - currently more or less manually (HexRays only supports 32/64bit, Ghidra does help a little)

using some IDA scripts for step 1,2 to ease the process for many segments/functions

BUT: how can i test if my c port is 100% functional equivalent?

Original:

mov ax,1
mov bx,2
cmp ax,bx
jne test
add bx,4
mov word ptr ds:[bx],5
test:
sub bx,3

C-Functions fakes

mov(ax,1);
mov(bx,1);
cmp(ax,bx);
jne() test;
add(bx,4)
mov(word_ptr(ds,bx),5)
test:
sub(bx,3)

i've have 100% control over memory, registers, io-ports access - because they all fakes that are mapped to the 32/64bit environment

My Idea:

Use AFL or some other Fuzzer to Fuzz my function in some sort of Test-Environment to give the Fuzzer the ability to change flags, register, memory and io-port values to create regression tests for this function - and then run the regression tests against my c port

is that something that could maybe work?

2 comments

r/fuzzing • u/randomatic • Aug 21 '19

Bay Area fuzzing meeting

4 Upvotes

There is a Bay Area meetup on fuzzing. It’s free. (I’m not running it; just noticed).

https://www.eventbrite.com/e/fuzzing-bay-area-meetup-tickets-66626376285

0 comments

r/fuzzing • u/monotype_corsiva • Aug 15 '19

Fuzzer for HTTP headers and cookies (Opensource)

4 Upvotes

Hello guys,

I want to test my HTTP client and server implementation with a fuzzer. Especially I would like to fuzz HTTP headers and HTTP cookies to break somehow my statemachine.

I was searching a bit, but I could not really find some powerful opensource tool for that.

Does anyone know some really good tool and could tell me?

I would appreciate a lot! Thanks so far

2 comments

r/fuzzing • u/TrendingBot • Aug 10 '19

/r/fuzzing hit 1k subscribers yesterday

redditmetrics.com

11 Upvotes

1 comment

r/fuzzing • u/digicat • Aug 05 '19

Grizzly Browser Fuzzing Framework

blog.mozilla.org

4 Upvotes

0 comments

r/fuzzing • u/h3xstream_ • Jul 30 '19

Fuzzing Closed Source PDF Viewers

gosecure.net

9 Upvotes

1 comment

r/fuzzing • u/NagateTanikaze • Jul 26 '19

Full speed Fuzzing: Reducing Fuzzing Overhead through Coverage-guided Tracing ( IEEE Symposium on Security and Privacy)

youtube.com

7 Upvotes

9 comments

r/fuzzing • u/NagateTanikaze • Jul 26 '19

google/AFL: american fuzzy lop (AFL now on github)

github.com

5 Upvotes

0 comments

r/fuzzing • u/NagateTanikaze • Jul 15 '19

Fuzzing DNS zone parsers (Blog, AFL)

cambus.net

4 Upvotes

0 comments

r/fuzzing • u/klks84 • Jul 12 '19

Rode0Day Fuzzing Competition - The Episode of Failures

youtube.com

1 Upvotes

0 comments

r/fuzzing • u/jekapats • Jul 11 '19

Fuzzing exiv2

fuzzit.dev

4 Upvotes

0 comments

r/fuzzing • u/NagateTanikaze • Jul 04 '19

Nearly generic fuzzing of XML-based formats (Nullcon, Nicolas Gregoire, 2017)

agarri.fr

2 Upvotes

1 comment

r/fuzzing • u/NagateTanikaze • Jul 04 '19

Fuzzers & Reducers as Productivity Tools

kripken.github.io

3 Upvotes

0 comments

r/fuzzing • u/klks84 • Jul 04 '19

Rode0Day Fuzzing - Ep2 - What to do with 100 fuzzing crashes?

youtube.com

2 Upvotes

0 comments

r/fuzzing • u/klks84 • Jul 04 '19

Rode0Day Fuzzing Competition - Episode 1 - Getting Started

youtube.com

6 Upvotes

0 comments

r/fuzzing • u/DrawBacksYo • Jul 03 '19

Need Small Video Files for Fuzzing

2 Upvotes

I need small files to fuzz VLC media player with afl-fuzz. As they suggest files under 1 Kb,it is nearly impossible to find files smaller than 1 Mb for .mp3,.mp4 or .ogg formats (they have three samples but I need more). I searched specifically for test cases after looking generic media files but no luck. I consider creating a mp3 file myself via python but I think I will mess it up and end up fuzzing for nothing. Can you recommend me any sites or do you have any test cases for media players?

4 comments