3 ms·
afl is great - it is hands-down the most easy to use fuzzer I've ever played with and it managed to find a couple of (non-exploitable) crashes in OpenSSH that i
by djmdjm 12y ago
afl is great - it is hands-down the most easy to use fuzzer I've ever played with and it managed to find a couple of (non-exploitable) crashes in OpenSSH that intensive human review and my own fuzzer missed.
I can't recommend it highly enough - if you care about robustness, and especially if you write software that has to cope with untrusted input then please give it a try.
- rwmj 12y agoIt is very good indeed. And just today we got it through the Fedora review process so within a few hours you should be able to do 'dnf install american-fuzzy-lop'. https://admin.fedoraproject.org/pkgdb/package/american-fuzzy-lop/ https://admin.fedoraproject.org/pkgdb/package/american-fuzzy...
- adestefan 12y agoI'd love to see it adapted for use as a fuzzer for network daemons. I have a couple ideas that mainly involve a separate driver from the binary to fuzz, but haven't dug too deeply into how to incorporate that.