3 ms·
Not a specialist in C and I'm not sure about the "suddenly" (it's always been a "powerful but dangerous" language), but for fuzzing look into AFL[1] (a fuzzing
by thephyber 7y ago
Not a specialist in C and I'm not sure about the "suddenly" (it's always been a "powerful but dangerous" language), but for fuzzing look into AFL[1] (a fuzzing program which uses a genetic algorithm to search a massive space of all possible inputs, but gravitate towards interesting fuzz inputs once a crash is observed) and for recent reverse engineering, the NSA released Ghidra[2] (reverse engineering framework).
[1] http://lcamtuf.coredump.cx/afl/ http://lcamtuf.coredump.cx/afl/
[2] https://github.com/NationalSecurityAgency/ghidra https://github.com/NationalSecurityAgency/ghidra
- cjbprime 7y agoYeah, the "suddenly" part refers to new techniques for using non-random inputs to fuzzers like AFL, combined with massive compute power from e.g. Google's ClusterFuzz. I don't have any good summary links, though.