Jump to content

afl fuzz (odd, check syntax)


Recommended Posts

Bash and Openssl are huge projects that have been fuzzed to death, find tutorials on smaller projects with known issues and learn to fuzz them, you will gain nothing useful from having an app running for multiple hours and finding nothing. Even if it finds something, bash is so complex that trying to work out if it is exploitable or not will be out of your skill level at the moment.

Search for all inclusive tutorials, ones that take you through the whole process on apps that have known issues. Work from the fuzz through the research and then the exploit dev, If you don't do the last few steps then the fuzzing is a waste of time, all you've managed to do is to prove an app will fall over.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...