Software Development

Preparing an Application for AFL-Fuzz

To fuzz test a C or C++ application for security vulnerabilities and crashes there are a few things that should happen first:

• Select an application appropriate for fuzz testing. The program should be written in C or C++ and process input…

What is “Continuous Fuzzing”?

Fuzz testing is a dynamic technique that bombards a target application with crafted input to force the execution of unanticipated paths, leading to potentially exploitable crashes. Recently, new, groundbreaking “smart” fuzzers such as AFL and libFuzzer have proven very…

Quick-start: Fuzzing with AFL

Fuzz test the deliberately vulnerable C program: Fuzzgoat.

A Fuzzing Quick-start with AFL

Want to try fuzz testing with the AFL fuzzer? AFL is easy to use but you still need a target…

What Applications Should Be Fuzz Tested?

Several factors indicate that an application is a good candidate for fuzz testing:

• The application is written in C or C++. These languages are non-memory safe (also called unmanaged.) As the developer must manage memory by hand…