Quick-start: Fuzzing with AFL

Fuzz test the deliberately vulnerable C program: Fuzzgoat.

A Fuzzing Quick-start with AFL

Want to try fuzz testing with the AFL fuzzer? AFL is easy to use but you still need a target…

What is “Continuous Fuzzing”?

Fuzz testing is a dynamic technique that bombards a target application with crafted input to force the execution of unanticipated paths, leading to potentially exploitable crashes. Recently, new, groundbreaking “smart” fuzzers such as AFL and libFuzzer have proven very…

Preparing an Application for AFL-Fuzz

To fuzz test a C or C++ application for security vulnerabilities and crashes there are a few things that should happen first:

• Select an application appropriate for fuzz testing. The program should be written in C or C++ and process input…

What Applications Should Be Fuzz Tested?

Several factors indicate that an application is a good candidate for fuzz testing:

• The application is written in C or C++. These languages are non-memory safe (also called unmanaged.) As the developer must manage memory by hand…

Fuzz Stati0n Pivots to Node JS

Do you drive a car or use a smart phone? If so, every day you run a vast amount of software — over 100 million lines of code. We live in a software dominated world and with the growth of AI, self driving vehicles and IoT (Internet of Things) skyrocketing, a massive amount of…