Fuzzing
- blog.senyuuri.info Fuzzing a Pixel 3a Kernel with Syzkaller
Preface # Syzkaller has been the buzzword ever since I started learning kernel exploitation.
-
Nyx - a VM-based snapshotting fuzzer
Nyx is a new fuzzing engine that allows you to harness and fuzz complex, stateful targets. By snapshotting a whole VM and being able to reset it to a clean state many thousand times per second, Nyx allows you to fuzz complex stateful targets such as browsers, operating systems or even hypervisors with zero hassle.
- airbus-seclab.github.io Advanced binary fuzzing using AFL++-QEMU and libprotobuf: a practical case of grammar-aware in-memory persistent fuzzing
Blogpost about optimizing binary-only fuzzing with AFL++
- github.com GitHub - microsoft/rusty-radamsa: Radamsa fuzzer ported to rust lang
Radamsa fuzzer ported to rust lang. Contribute to microsoft/rusty-radamsa development by creating an account on GitHub.
-
Rust Fuzzing Book - Information on Fuzz Tooling in Rust
rust-fuzz.github.io Introduction - Rust Fuzz BookGuide on how to fuzz test software written in the Rust programming language
This is a pretty neat read. Has information on writing fuzz tests, setting up tooling (including AFL), structured fuzzing, and ways to make your fuzz tests produce fancy output only when reproducing a failure case \.\
-
-
The Fuzzing Book
Tools and Techniques for Generating Software Tests
by Andreas Zeller, Rahul Gopinath, Marcel Böhme, Gordon Fraser, and Christian Holler
A great introduction to fuzzing. Does not stop at the basics providing a glimpse into the broad spectrum of techniques, approaches and topics.