Collaborate Disseminate
I have the following setup:
PBX Server -> Internet -> LAN -> IP Phone -> Workstation (PC)
Which means that my computer is connected to the LAN, through a Dual Ethernet card on the IP Phone.
I would like to ana… Continue reading Sniffing devices in a serial topology
Two years ago, when we began taking on blockchain security engagements, there were no tools engineered for the work. No static analyzers, fuzzers, or reverse engineering tools for Ethereum. So, we invested significant time and expertise to create what … Continue reading Use our suite of Ethereum security tools
Today we released Echidna, our next-generation EVM smart fuzzer at EthCC. It’s the first-ever fuzzer to target smart contracts, and has powerful features like abstract state-machine modeling and automatic minimal test case generation. We’ve… Continue reading Echidna, a smart fuzzer for Ethereum
I can see there are great tools to do automated fuzzing: https://en.wikipedia.org/wiki/Fuzzing
ex.: https://en.wikipedia.org/wiki/American_fuzzy_lop_(fuzzer)
But how can a non-programmer help these groups?
Are there any B… Continue reading How to help the automated fuzzing community?
I need to fuzz an interactive binary (for which I do not have the source code) compiled for a MIPS architecture. It is a login console and i’d like to fuzz the interactive text provided by the user (ie.: the console asks for … Continue reading Fuzzing a mips interactive binary
I think I understand the difference between fuzzing and symbolic execution especially when it comes to having a program that expects specific values (in this case symbolic execution will work and fuzzing probably won’t).
I want to do network protocol-based fuzzing using a network protocol specified in ASN.1.
After investigating the available open source tools I face the deciding between the peach community edition, sulley and boofuzz.
But bec… Continue reading ASN.1-based network protocol fuzzer
I want to do network protocol-based fuzzing using a network protocol specified in ASN.1.
After investigating the available open source tools I face the deciding between the peach community edition, sulley and boofuzz.
But bec… Continue reading ASN.1-based network protocol fuzzer
Most of the more famous fuzzers such as Sulley or SPIKE seems to work only for network applications. I can’t seem to find any fuzzers for GUI-based applications for Windows. Is it because it is not feasible to create one for … Continue reading Are there any good fuzzers for Windows GUI applications?
I’m trying to fuzz wordpress post password fuctionality with my lists of password. Unfortunately, when fuzzing password page with correct password, and setting redirections to true, ZAP does not display logged in page. Instea… Continue reading Zed Attack Proxy Fuzzer cookie handling