Collaborate Disseminate
Is it suitable to test client-side implementation of some protocol or service, by setting up fuzzer on server-side, and then try to fuzz as many clients as possible at the same time.
By that I want to speed up fuzzing tests,… Continue reading Distributed fuzzing of Client-side implementation
I have installed two different fuzzer ZZUF and PEACH fuzzers. Unfortunately, my lack of knowledge I could not test C++ binaries by both fuzzers. Testing binaries process is not given PEACH and ZZUF tutorials.
For example ab… Continue reading Analyzing binary by ZZUF and PEACH fuzzers
After some personal research I didn’t find any possible way or a paper to explain how to determine what architecture a given piece of shellcode may targets. The only obvious way I found would be to disassemble it for various … Continue reading Determine what architecture a piece of shellcode targets
If unit tests are important to you, there’s now another reason to use DeepState, our Google-Test-like property-based testing tool for C and C++. It’s called Eclipser, a powerful new fuzzer very recently presented in an ICSE 2019 paper. We a… Continue reading Fuzzing Unit Tests with DeepState and Eclipser
Is software fuzzing safe (Anerican fuzzy lop or AFL for example)? What’s its probability of producing a random input that can make the program
Delete a file or
Connect to a random server
into a program?
I am not newbie at exploit development , but I would like to have a solid useful fuzzing framework instead of picking every fuzzing to see if it’s work.. I Have a list of fuzzing framework which I would use in certain cases.
… Continue reading What’s a good fuzzing framework for fuzzing a local standalone GUI / network application / Browser?
I have been looking for some options in order to fuzz windows based GUI application. I have an application binary (exe) which has some GUI forms, first it asks for Login and demand username and password in boxes (usual GUI st… Continue reading Fuzzing of GUI based windows applications
When reading about fuzzing, the way to go seems to ignore checksums and cryptographic integrity protection or at least circumvent verification procedures via a ‘fuzz-friendly mode’. For black-box protocol fuzzing this can not… Continue reading Is there a protocol fuzzer or fuzzing framework that uses cryptography?
Fuzzing is a great way to find bugs in software, but many developers don’t use it. We hope to change that today with the release of Sienna Locomotive, a new open-source fuzzer for Windows that emphasizes usability. Sienna Locomotive aims to make … Continue reading User-Friendly Fuzzing with Sienna Locomotive
I wanted to Fuzz Tests my API’s on my own stack which are hosted on AWS environment (Have used lambdas and API gateway)
There are mostly GET APIs and only one PUT API.My requirement is to Fuzz Test the API headers and the bo… Continue reading Should I take (Pen test) approval from AWS for Fuzz testing my Application API’s hosted on AWS?