Collaborate Disseminate
Microsoft announced a cloud-based fuzz testing service called Project Springfield that identifies software bugs in applications that could turn into vulnerabilities. Continue reading Microsoft Unveils Cloud-Based Fuzz-Testing Service
This Moday Microsoft debuted Project Springfield, a cloud-based fuzz testing (aka fuzzing) service that the company has been working on for a quite a while. David Molnar and Patrice Godefroid, two of the key researchers behind Project Springfield, have been claiming since 2010 that fuzzing in the cloud will revolutionize security testing, and now they have provided the means to prove that assertion. What is fuzz testing? Fuzz testing is a method for discovering bugs … More → Continue reading Project Springfield: Cloud-based fuzz testing for uncovering million-dollar bugs
Project Springfield, Microsoft’s “million-dollar bug detector” now available in cloud. Continue reading Microsoft launches “fuzzing-as-a-service” to help developers find security bugs
I’m just starting out to learn about fuzzing and have made a dumb fuzzer that changes several random bytes in a pdf file to random values, opens it and detects if Acrobat Reader has crashed. What types of bugs can I expect to… Continue reading What kind of bugs can be found by dumb fuzzing a desktop app?
I have come across multiple machine learning based security solutions that train their detectors/models using "benign" inputs. The assumption is that the operator has access to sufficiently exhaustive benign inputs (benign inputs… Continue reading Assuming existence of sufficient number of benign inputs?
I’m looking for any guidance around testing a service I’ve found running on a target server. I’m doing a ‘black-box’ pen-test and the company is one of those ‘I-don’t-want-to-tell-you-anything’ types so they won’t tell us wha… Continue reading Black-box fuzzing a TCP Port running an unknown applicaiton
I’ve heard of these tools and from what I understand, they just send tons of random data at different services and observe their reaction to it.
What is the purpose of a fuzzer? How can it be applied during a pentest?