2 ms·
> Fuzzing usually revolves around strings because of escape characters, escape sequences. Not always. AFL has been used to detect issues around processing plai
by pdpi 5y ago
> Fuzzing usually revolves around strings because of escape characters, escape sequences.
Not always. AFL has been used to detect issues around processing plain old binary data (eg https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8637 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8637)
I would argue that anything involving a parser of some description (either binary or text-based) is a good candidate for fuzzing.