The Art of Fuzzing Without Fuzzing

Presented at Kiwicon 9: Cyberwar Is Hell (2015), Dec. 11, 2015, 4:45 p.m. (45 minutes)

PURSUANT TO: Cyber Munitions, Creation Of KEYWORDS: Cyber; War; Cyberwar; Death, Merchants Of With the growing popularity of usable guided fuzzing tools like AFL, it is time to revisit some old assumptions. Fuzzing researchers have always pointed out the importance of starting corpora, but exactly HOW important are they? We should be spending more of our time on corpus generation and less on fuzzing slow, annoying, GUI targets. But, just HOW GOOD can we make them? What if we didn't need to fuzz those annoying targets all? This is a summary of a few months research into Corpus Driven Fuzzing, or, as I like to call it, Fuzzing Without Fuzzing.


  • Ben Nagy
    THIS SPACE INTENTIONALLY LEFT BLANK (for now, nagy. You'll keep)


Similar Presentations: