3 ms·
Video: https://media.ccc.de/v/37c3-12235-fuzzing_the_tcp_ip_stack https://media.ccc.de/v/37c3-12235-fuzzing_the_tcp_ip_stack
by rurban 3y ago
Video: https://media.ccc.de/v/37c3-12235-fuzzing_the_tcp_ip_stack https://media.ccc.de/v/37c3-12235-fuzzing_the_tcp_ip_stack
- jagrsw 3y agoPlayed around with coverage-guided fuzzing using honggfuzz and Intel BTS/PT a while back. Didn't have much time to fine-tune, but it seemed solid. It'd need a couple of months to properly dial in and see real results. The coverage was increasing, and aligning with the symbol tables, it was hitting the right parts of the kernel. Harness: https://github.com/google/honggfuzz/tree/master/examples/linux_kernel_ip https://github.com/google/honggfuzz/tree/master/examples/lin...
- rurban 3y agoWith coverage guided fuzzing you wont get into the deep states of such protocols. If it's TCP/IP or TLS or similar. You'd really need a client/server simulator, and fuzz this.