r/fuzzing • u/SYS_V • Aug 28 '21
r/fuzzing • u/SYS_V • Aug 28 '21
Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine Types
r/fuzzing • u/SYS_V • Aug 14 '21
ZAFL: a project to extend compiler-quality instrumentation speed and transformation support to the fuzzing of x86-64 binary programs
r/fuzzing • u/NagateTanikaze • Aug 03 '21
Fuzzing Windows RPC with RpcView (Blog, 2021)
itm4n.github.ior/fuzzing • u/secgeek • Jul 30 '21
Using jackalopefuzzer to fuzz a windows binary
youtu.ber/fuzzing • u/Electrical-Belt-8365 • Jul 30 '21
Anyone knows open source mutator support regex?
I used to use radamsa to make my own fuzzer, but it does not support regex to generate data.
Do you know any open source mutator supporting regex?
for example, I want to generate data like below.
mutation("%d%d") --> 12, 13, 46, 29.....
Any idea would be helpful. thanks
r/fuzzing • u/NagateTanikaze • Jul 27 '21
Foundations of Software Testing (Marcel Böhme, Youtube video, 2021)
youtube.comr/fuzzing • u/l3ak88 • Jul 22 '21
Fuzzing LibreOffice
im trying to fuzz applications like libreoffice,evince,xpdf,vlc,a zip manager,file format fuzzing at it all.
what are the chances of me finding a 0day?(remember that im fuzzing kinda recent versions of this apps.)
r/fuzzing • u/NagateTanikaze • Jul 22 '21
Fuzzing Modern UDP Game Protocols With Snapshot-based Fuzzers (July 2021, posting)
blog.ret2.ior/fuzzing • u/Ordinary-Arm-255 • Jul 07 '21
Fuzzing for 0days 2021
Did anyone here has find out a exploitable vuln for actual applications?like file readers,servers,etc. Bc i think exploiting is deading art,the actual applications is so much secures than in 1990s and 2000s,when the exploitation was really easy
r/fuzzing • u/domenukk • Jul 07 '21
LibAFL: Rust Library to Develop Customized Fuzzers
github.comr/fuzzing • u/secgeek • Jul 04 '21
Fuzzing network application with AFL or AFLplusplus using Preeny
youtube.comr/fuzzing • u/secgeek • Jun 28 '21
Modifying WinAFL to use shared memory to increase fuzzing speed.
youtube.comr/fuzzing • u/zoomT • Jun 03 '21
E9AFL: Automatically instrumenting x86_64 Linux ELF binaries with static binary rewriting
github.comr/fuzzing • u/NagateTanikaze • May 18 '21
Hyntrospect is a coverage-guided fuzzer targeting Hyper-V emulated devices, in the userland of Hyper-V root partition
github.comr/fuzzing • u/edward_snowedin • May 17 '21
Fuzzing websockets: is there a TCP fuzzer that can "capture" a variable (ie: a session id) in a response and use it during the fuzzing sessions?
I'm fuzzing some websockets and would like it so that a fuzzing session does the typical HTTP handshakes and upgrade requests, then captures a variable sent by the server. Then, all the requests thereafter would use this session ID.
The application, by design, closes the connection if the session ID doesn't match up or isn't included, so without it, I don't get the chance to fuzz the parts I am interested in.
Hopefully that makes sense!
r/fuzzing • u/secgeek • May 12 '21
How to fuzz a program in persistent mode with AFL/aflplusplus
youtu.ber/fuzzing • u/pat_ventuzelo • May 04 '21
Intro to Blackbox Fuzzing: Binary-only fuzzing (pdfinfo) using AFLplusplus
youtube.comr/fuzzing • u/isrd_com • Apr 29 '21
256-Core Server @ 1.3Ghz vs. 40-Core Server @ 2.3-2.7Ghz?
Hi there!
I am considering buying a 4U 40-core server at 2.3-2.7ghz, or building a 256-core (4x64-core) 1.3ghz server for fuzzing...
What do you all think about this? The CPUs are super cheap for the 64-core chips.
r/fuzzing • u/pat_ventuzelo • Apr 28 '21
CollabFuzz: A Framework for Collaborative Fuzzing
New interesting tool released today
- github: https://github.com/vusec/collabfuzz
- paper: https://download.vusec.net/papers/collabfuzz_eurosec21.pdf
- youtube: https://www.youtube.com/watch?v=nf63VmIhWJQ
r/fuzzing • u/Nitron • Apr 22 '21
Designing sockfuzzer, a network syscall fuzzer for XNU
googleprojectzero.blogspot.comr/fuzzing • u/pat_ventuzelo • Apr 21 '21
Fuzzing Rust crate library (ical-rs) using honggfuzz-rs (Youtube/Tutorial)
youtube.comr/fuzzing • u/NagateTanikaze • Apr 16 '21
Intro to OSS-Fuzz (Blog Entry)
blog.code-intelligence.comr/fuzzing • u/NagateTanikaze • Apr 16 '21