Revision as of 05:27, 2 April 2016

Fuzzer

About

American fuzzy lop is a program for fuzzing inputs. It is very sophisticated and can be instrumented with a binary to do very targeted fuzzing.

Get the latest version, and run make to make it:

$ wget http://lcamtuf.coredump.cx/afl/releases/afl-latest.tgz 
$ tar -xvf afl-latest.tgz cd afl-latest.tgz
$ cd afl-*
$ make 
$ make install

Success!

root@morpheus:~/codes/afl-2.10b# which afl-fuzz
/usr/local/bin/afl-fuzz

Programs that can be fuzzed are those that take input files, usually binary files or unusual formats. (Think mp3, multimedia, images, etc.)

We'll be fuzzing John the Ripper to understand how AFL works.

Revision as of 05:16, 2 April 2016 (view source) Admin (talk \| contribs) No edit summary ← Older edit		Revision as of 05:27, 2 April 2016 (view source) Admin (talk \| contribs) (→‎Fuzzing a Program) Newer edit →
Line 29:		Line 29:

	Programs that can be fuzzed are those that take input files, usually binary files or unusual formats. (Think mp3, multimedia, images, etc.)		Programs that can be fuzzed are those that take input files, usually binary files or unusual formats. (Think mp3, multimedia, images, etc.)

			We'll be fuzzing [[John the Ripper]] to understand how AFL works.