Full Disclosure mailing list archives
AUTODAFE: an Act of Software Torture [FUZZER]
From: Martin Vuagnoux <fulldisclosure () vuagnoux com>
Date: Sat, 05 Aug 2006 01:40:12 +0200
Dear list, let me present you the public release of a fuzzer presented at 22c3:Autodafé is a fuzzing framework able to uncover buffer overflows by using the fuzzing by weighting attacks with markers technique.
http://autodafe.sourceforge.netYou will find a paper explaining the technique used, the slides of the presentation and the source code. It uses a script language largely inspired by Spike (btw: thanks Dave). The major improvement is the use of a debugger in order to reduce the test space. There is a tutorial (based on real cases) which explains how to use it, to fuzz network based (TCP/UDP) protocols (client and server side) and files (lps, pdf, jpeg, etc.) The second major improvement is the use of dissector (etheral, wireshark) to automatically recognize 750 network based protocols.
Feel free to give feedback, it's a beta release. Enjoy 8^P Martin Vuagnoux _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- AUTODAFE: an Act of Software Torture [FUZZER] Martin Vuagnoux (Aug 04)
- Re: AUTODAFE: an Act of Software Torture [FUZZER] Dan B (Aug 04)