Packet fuzzing?
#3
(12-26-2015, 11:10 PM)worktycho Wrote: I haven't. The tool I use primarily handles files, and cProtocol is too closely tied to cClientHandle to build easily on its own. I would like to have another look at doing it at some point, as I wouldn't be suprised if I found crashes.

I wonder if we could use the American Fuzzy Lop for this: Save a typical packet in a file, feed it to netcat and make it transmit it to the server, see if that causes a crash, and report back to AFL so that it modifies the file.

Also, to fuzz things beyond initial connection, one would have to replace netcat with some custom software, which connects, authenticates, and joins the world, and only then sends the fuzzing packet stored in the file.
Reply
Thanks given by:


Messages In This Thread
Packet fuzzing? - by LogicParrot - 12-26-2015, 06:49 PM
RE: Packet fuzzing? - by worktycho - 12-26-2015, 11:10 PM
RE: Packet fuzzing? - by LogicParrot - 12-26-2015, 11:13 PM
RE: Packet fuzzing? - by worktycho - 12-26-2015, 11:27 PM
RE: Packet fuzzing? - by LogicParrot - 12-26-2015, 11:33 PM
RE: Packet fuzzing? - by worktycho - 12-26-2015, 11:41 PM
RE: Packet fuzzing? - by xoft - 12-26-2015, 11:58 PM
RE: Packet fuzzing? - by worktycho - 12-27-2015, 12:08 AM



Users browsing this thread: 5 Guest(s)