Vulnerability Development mailing list archives

[TOOL] winFuzz (1.0.0.1)


From: v9 () fakehalo us
Date: 15 Jul 2007 23:54:35 -0000

winFuzz is a security researching fuzzer for windows that behaves more as a precise debugger than a normal random 
fuzzer. This is done by isolating points (fuzzPoints) in arbitrary files to be tested against programs and/or remote 
services to attempt to cause memory corruption scenarios in the form of integer and/or buffer overflows.

(I made winFuzz essentially because I couldn't find a (arbitrary memory corruption) fuzzer that did the things I 
wanted(outside of 'taof', which I took some ideas from). So, I figured i'd make a fuzzer that did what I wanted and the 
way I wanted...and here we are)

download/examples link:
http://fakehalo.us/winfuzz/


...bugs may exist, as it's a first version.  if found, send me an email.


Current thread: