Tags
Why random-mutation fuzzers lose coverage on structured protocols, and how to model a PDU with a grammar to systematically traverse field combinations. Covers And/Or combinatorial-explosion control, automatic boundary-value generation, automatic Size-field computation, and Lua-based checksum recomputation.
Read full articleHow a stack buffer overflow was found in the compression utility dact using AFL and AddressSanitizer. Root-cause analysis of a file_extd_urls array overflow triggered by a crafted DACT header.
Read full articleA practical reference for binary exploitation and firmware analysis work: extracting shellcode, finding libc /bin/sh addresses, pwn compilation flags, BinDiff installation, fixing binwalk/sasquatch errors, and AFL crash triage.
Read full articleAn introduction to coverage-guided fuzzing with AFL: instrumenting xpdf, triaging crashes, and reproducing CVE-2019-13288
Read full article