3 ms·
SAGE/Springfield is a file format fuzzer that relies on being able to instrument the target to extract information about how to change it's fuzzing input. I do
by Eridrus 10y ago
SAGE/Springfield is a file format fuzzer that relies on being able to instrument the target to extract information about how to change it's fuzzing input.
I don't think they've done the work to extend the instrumentation to the Windows kernel. A more apt comparison for this would be looking at how successful other file format fuzzers are at finding bugs in Office.
- huppriy 10y agoThey are actually stating it has been used on Office on the link in the OP. > Battle tested tech > The same state-of-the-art tools and practices used > inside Microsoft to fuzz Windows and Office applications.
- Eridrus 10y agoExactly; looking at how successful other fuzzer are at finding new bugs in Office will give you some sense that SAGE is actually pretty good, just narrow in scope.