6 ms·
Can you point me to any reading or resources on this topic?
by jpkiser 7y ago
Can you point me to any reading or resources on this topic?
- thephyber 7y agoNot a specialist in C and I'm not sure about the "suddenly" (it's always been a "powerful but dangerous" language), but for fuzzing look into AFL[1] (a fuzzing program which uses a genetic algorithm to search a massive space of all possible inputs, but gravitate towards interesting fuzz inputs once a crash is observed) and for recent reverse engineering, the NSA released Ghidra[2] (reverse engineering framework). [1] http://lcamtuf.coredump.cx/afl/ http://lcamtuf.coredump.cx/afl/ [2] https://github.com/NationalSecurityAgency/ghidra https://github.com/NationalSecurityAgency/ghidra
- cjbprime 7y agoYeah, the "suddenly" part refers to new techniques for using non-random inputs to fuzzers like AFL, combined with massive compute power from e.g. Google's ClusterFuzz. I don't have any good summary links, though.