fuzzing

Tools for Feature Extraction from Binary Data of Images

由 隐身守侯 提交于 2019-12-11 05:52:28
问题 I am working on a project where I am have image files that have been malformed (fuzzed i.e their image data have been altered). These files when rendered on various platforms lead to warning/crash/pass report from the platform. I am trying to build a shield using unsupervised machine learning that will help me identify/classify these images as malicious or not. I have the binary data of these files, but I have no clue of what featureSet/patterns I can identify from this, because visually

Fuzz-testing XML-parser

由 穿精又带淫゛_ 提交于 2019-12-03 07:46:04
问题 I want to fuzz-test a XML-parser and wonder if there are some appropriate fuzzers. It would be nice not only generate random garbage, but take advantages of existing schema specification like XSD or DTD. 回答1: Following are some XML fuzzers that I chanced upon, during a search several months back: untidy . This is does not appear to be in active development, with the last update in 2007. (Project no longer available on Sourceforge, for posterity see archive.org for partial content, and

Looking for a Java fuzzing library or fuzzer tool with a good API [closed]

由 ▼魔方 西西 提交于 2019-12-03 06:14:29
Closed. This question is off-topic. It is not currently accepting answers. Learn more . Want to improve this question? Update the question so it's on-topic for Stack Overflow. Are there any fuzzer libraries out there for Java? I'd like to sprinkle fuzzing capabilities into existing Java web-based automated integration tests. I've done a lot of searching but I'm coming up empty for a library that supports HTTP/S. There are a lot of Python tools, but I'd like to stick with Java since that's what the programmers are using. JBroFuzz essentially has the fuzzing capabilities I need, but I need an

Fuzz-testing XML-parser

由 笑着哭i 提交于 2019-12-02 21:12:57
I want to fuzz-test a XML-parser and wonder if there are some appropriate fuzzers. It would be nice not only generate random garbage, but take advantages of existing schema specification like XSD or DTD. Vineet Reynolds Following are some XML fuzzers that I chanced upon, during a search several months back: untidy . This is does not appear to be in active development, with the last update in 2007. (Project no longer available on Sourceforge, for posterity see archive.org for partial content , and packetstorm for download. It was added to Peach-1.0, but no longer appears in the Peach-3.1

invalid value 'edge' in 'fsantize-coverage=edge' when using LLVM LibFuzzer

由 僤鯓⒐⒋嵵緔 提交于 2019-12-02 04:15:35
问题 http://llvm.org/docs/LibFuzzer.html I'm doing some works with libfuzzer now but when I do with the official toy example. when i run this command: clang++ -fsanitize=address -fsanitize-coverage=edge test-fuzzer.cc Fuzzer*.o there is an error happening that clang: error: invalid value 'edge' in 'fsanitize-coverage=edge' it seems that clang supports this argument but i'm wondering how i can see what value is supported... i installed llvm 3.6 by apt-get with unbuntu14.04... 回答1: The syntax of the

Frameworks for network protocol fuzzing? [closed]

由 一笑奈何 提交于 2019-11-29 01:20:12
问题 Can anyone recommend any programmer-friendly (i.e. extensible) frameworks or systems for performing network level packet fuzzing? I'm looking for such a system where I can program in additional packet formats and various ways of breaking those packets in a protocol-dependent manner. I know how to Google. I'm looking for specific recommendations :) thanks! 回答1: You might be interested in American Fuzzy Lop combined with Preeny. It's a fuzzer that is quite simple to use and employs genetic

Capture “Segmentation fault” message for a crashed subprocess: no out and err after a call to communicate()

由 大兔子大兔子 提交于 2019-11-27 02:08:21
I have problems using the subprocess module to obtain the output of crashed programs. I'm using python2.7 and subprocess to call a program with strange arguments in order to get some segfaults In order to call the program, I use the following code: proc = (subprocess.Popen(called, stdout=subprocess.PIPE, stderr=subprocess.PIPE)) out,err=proc.communicate() print out,err called is a list containing the name of the program and the argument (a string containing random bytes except the NULL byte which subprocess doesn't like at all) The code behave and show me the stdout and stderr when the program

Capture “Segmentation fault” message for a crashed subprocess: no out and err after a call to communicate()

由 蹲街弑〆低调 提交于 2019-11-26 17:29:02
问题 I have problems using the subprocess module to obtain the output of crashed programs. I'm using python2.7 and subprocess to call a program with strange arguments in order to get some segfaults In order to call the program, I use the following code: proc = (subprocess.Popen(called, stdout=subprocess.PIPE, stderr=subprocess.PIPE)) out,err=proc.communicate() print out,err called is a list containing the name of the program and the argument (a string containing random bytes except the NULL byte
订阅 fuzzing