7 ms·
Speaking of, do you know of any tools for doing grammar-based fuzzing?
by cmrx64 10y ago
Speaking of, do you know of any tools for doing grammar-based fuzzing?
- munin 10y agopeachfuzz, quickfuzz, dharma, grammfuzz. They get done a bunch and usually people wind up re-inventing lisp to make a data specification DSL, then write some generators around it and call it a day. The generation strategy usually winds up being domain specific too (are you looking for OOB bugs? dangling refs / UAF? different patterns in different structured data lead to these errors without feedback) so honestly you should pick some parser combinator in a language that you know (like construct for python, or hammer for C) and then turn it into a fuzzer for your application yourself, using the faults you want to find as inspiration for the generators you write.
- rixrax 10y agoPeach Fuzzer[p] and Synopsys Defensics[d] should fit the bill. Both are commercial. I'm not aware of any OSS grammar-based fuzzers that would be good for anything (ok; there is Sulley and some others which seemingly haven't been maintained in eons). [p] www.peachfuzzer.com/ [d] https://www.synopsys.com/software-integrity/security-testing/fuzz-testing.html https://www.synopsys.com/software-integrity/security-testing...