Questions tagged [fuzzing]

A software testing technique that involves providing invalid, unexpected, or random data to the inputs of a computer system, then monitoring for exceptions, failed assertions, or memory leaks.

Fuzzing is a software testing technique that involves providing invalid, unexpected, or random data to the inputs of a computer program, then monitoring for exceptions, failed assertions, or memory leaks. Fuzzing can be employed as part of white-, gray-, or black-box testing.

In the context of reverse-engineering, fuzzing is often used to discover undocumented features or functionalities, not to say backdoors.

27 questions
7
votes
2 answers

State of the Art Fuzzing Framework

I've previously rolled my own Fuzzing Framework, and tried a few others like Peach Fuzzer. It's been awhile since I've looked at vulnerability hunting, what is the state of the art with regard to fuzzing? That is, if I were to start fuzzing Acme…
mrduclaw
  • 4,066
  • 8
  • 27
  • 40
2
votes
2 answers

Getting started with dynamic reverse engineering

I have been doing a lot of reading into how to find vulnerabilities in closed source applications. And the term that comes up a lot is "fuzzing". I want to get started with fuzzing and I looking for any tips and hints on where and how to start.…
Sreyan
  • 203
  • 2
  • 7
1
vote
0 answers

Is there distributed fuzz testing platform against modern proprietary CPU like SETI@HOME?

My idea is near what SETI Institute does. Distributed fuzz testing against modern Intel and Amd Central processing units(CPU). To find similar to Blue Pill bugs. Is there?
1
vote
1 answer

Approach for fuzzing interactive CLI

I have an IoT system that has a command-line-based interactive shell that can be used to configure the system. While examining the disassembly/decompilation, I realized that there is a lot of functionality/code to the CLI and a lot of possible…
multithr3at3d
  • 611
  • 3
  • 15