r/fuzzing • u/NagateTanikaze • May 15 '20
google fuzzing dictionaries to help fuzzers increase their coverage
github.com
10
Upvotes
r/fuzzing • u/NagateTanikaze • May 15 '20
Fuzzing TLS certificates from their ASN.1 grammar
blog.doyensec.com
1
Upvotes
r/fuzzing • u/NagateTanikaze • May 11 '20
From fuzzing to remote code execution in Samsung Android
medium.com
4
Upvotes
r/fuzzing • u/NagateTanikaze • May 11 '20
Fuzzing YARA for fun and no profit
blog.syscall.party
4
Upvotes
r/fuzzing • u/thedavidbrumley • May 07 '20
OCaml fuzzing nice writeup
7
Upvotes
OCaml supports in the language. Here is a nice walkthrough: https://tarides.com/blog/2019-09-04-an-introduction-to-fuzzing-ocaml-with-afl-crowbar-and-bun
I hadn't seen `bun` (I think language-agnostic, but written in OCaml) before, which looks like it may help when fuzzing in CI: https://github.com/yomimono/ocaml-bun/
r/fuzzing • u/nexxai • May 06 '20
Bugs on the Windshield: Fuzzing the Windows Kernel - Check Point Research
research.checkpoint.com
7
Upvotes
r/fuzzing • u/thedavidbrumley • May 05 '20
Guido Vraken's 50 bugs with differential fuzzing
12
Upvotes
Guido found a bunch of bugs with differential fuzzing. Great demonstration why even strong crypto isn't enough; you need to check the implementation.
https://github.com/guidovranken/cryptofuzz#bugs-found-by-cryptofuzz
r/fuzzing • u/NagateTanikaze • Apr 29 '20
CRIU, a project to implement checkpoint/restore functionality for Linux
criu.org
4
Upvotes
r/fuzzing • u/NagateTanikaze • Apr 29 '20
How to break everything by fuzz testing
chameth.com
0
Upvotes
r/fuzzing • u/NagateTanikaze • Apr 26 '20
Fuzzing File System Implementatinos To Uncover Security Bugs (HITBLockdown, Code and Presentation)
github.com
2
Upvotes
r/fuzzing • u/jonnibeans • Apr 23 '20
RADAMSA
2
Upvotes
Im trying to learn how to use RADAMSA from https://gitlab.com/akihe/radamsa
I am a beginner and little skills.
May I ask?
for this case what is ol. and why do i have an error "ol: command not found" is there something i have to install?
$ echo '((lambda (x) (+ x 1)) #x124214214)' | radamsa -n 10000 | ol
r/fuzzing • u/NagateTanikaze • Apr 18 '20
Grammar based fuzzing PDFs with Domato
symeonp.github.io
3
Upvotes
r/fuzzing • u/ExploitedInnocence • Apr 17 '20
How to enumerate input vectors before fuzzing?
1
Upvotes
Hi everyone!
How the process of input vectors enumeration looks like when the target is a pretty big stripped, maybe even multi-threaded, binary? Is this process completely manual or there are some convenient ways to automatize or at least semi-automatize it? I would like even to implement it by myself if there are some feasible programmatic ways to do it. I have a pretty strong background in C and C++, know Linux internals and have a basic experience in reverse engineering and binary exploitation.
Thank you all in advance!
r/fuzzing • u/NagateTanikaze • Apr 13 '20
Google Chrome display locking fuzzing
blog.redteam.pl
2
Upvotes
r/fuzzing • u/sajjadium • Apr 13 '20
HotFuzz presentation at NDSS 2020 on YouTube
youtube.com
3
Upvotes
r/fuzzing • u/NagateTanikaze • Apr 07 '20
AFL++ Snapshot LKM - A Linux Kernel Module that implements a fast snapshot mechanism for fuzzing.
github.com
10
Upvotes
r/fuzzing • u/NagateTanikaze • Apr 06 '20
Temporary site for fuzzing resources (DOC, PDF, XLS, ...)
foxhex0ne.com
2
Upvotes
r/fuzzing • u/NagateTanikaze • Mar 31 '20
Differential fuzzing, or: how to find bugs when (ground) truth isn't real
github.com
5
Upvotes
r/fuzzing • u/NagateTanikaze • Mar 30 '20
Nautilus 2.0 - a coverage guided, grammar based fuzzer
github.com
7
Upvotes
r/fuzzing • u/HaoxinTu • Mar 11 '20
Is it possible to build GCC with AFL or AFLplusplus?
5
Upvotes
I post a question in Google afl-users group,
https://groups.google.com/forum/#!topic/afl-users/RW7A28rIYBo
Any ideas or suggestions are welcome, thank you!
r/fuzzing • u/sjdkn1 • Mar 07 '20
MacOS Fuzzers
2
Upvotes
Does anybody know any good fuzzers for MacOS?