Dailydave mailing list archives
Re: Does Fuzzing really work?
From: Matt Hargett <matt () use net>
Date: Thu, 28 Sep 2006 09:30:10 -0700
On Thursday 28 September 06 04:48, Martin Vuagnoux wrote:
ergosum wrote:On Wednesday 27 September 2006 17:45, Ian Melven wrote:There's a lot of links to fuzzing papers, tools, and articles here. http://www.threatmind.net/secwiki/FuzzingToolsNice resource.There is another tool and another paper at http://autodafe.sourceforge.net (auto-ads :-)) The version 0.2 is imminent with automatic detection of format string and heap overflow under Linux. We are working on Windows version of the tracer based on PaiMei...
A contributor to bugreport told me about autodafe and it sounds like a very pragmatic approach to the problem. Most academics get so hung up on what they perceive to be a 100% solution that they never produce anything useful to the world at large. I'm so glad autodafe is out there and re-using existing file formats from other open source projects. I always wished that Hailstorm's core engine (a fuzzing product I was QA Manager on, and then a developer on) would have been open sourced -- Caezar's architecture was very clean and easy to unit test (once I got around to it). I'll bet they don't hold back bugfixes to prevent users from finding exploits, either ;> PS: My last post to the list didn't come through. I certainly hope it wasn't censored or purposefully delayed in some way. _______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://lists.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- Re: Does Fuzzing really work?, (continued)
- Re: Does Fuzzing really work? Peter Winter-Smith (Sep 25)
- Re: Does Fuzzing really work? Aviram Jenik (Sep 25)
- Re: Does Fuzzing really work? Halvar Flake (Sep 26)
- Re: Does Fuzzing really work? ergosum (Sep 26)
- Re: Does Fuzzing really work? Charlie Miller (Sep 27)
- Re: Does Fuzzing really work? Ian Melven (Sep 27)
- Re: Does Fuzzing really work? ergosum (Sep 27)
- Re: Does Fuzzing really work? Jared DeMott (Sep 27)
- Re: Does Fuzzing really work? Martin Vuagnoux (Sep 28)
- Re: Does Fuzzing really work? Jared DeMott (Sep 28)
- Re: Does Fuzzing really work? Matt Hargett (Sep 28)
- Re: Does Fuzzing really work? Jared DeMott (Sep 29)
- Re: Does Fuzzing really work? Aviram Jenik (Sep 25)
- Re: Does Fuzzing really work? Peter Winter-Smith (Sep 25)