The Art, Science, and Engineering of Fuzzing: A Survey · HackerPapers discussions

The Art, Science, and Engineering of Fuzzing: A Survey — mentioned by nickpsecurity

Fri, 01 Mar 2024 19:41:50 GMT

Here’s a survey of fuzzing techniques: https://arxiv.org/pdf/1812.00140.pdf One of the earliest examples was a person who fuzzed many applications by getting them to load files he created. His files triggered many vulnerabilities in apps. His method (IIRC): take a file, flip a bit, load it, repeat throughout the file. Amazing how effective it was.

Paper and discussion history. A mention is not an endorsement.

The Art, Science, and Engineering of Fuzzing: A Survey — HN submission

Thu, 16 Jan 2020 08:15:37 GMT

The Art, Science, and Engineering of Fuzzing: A Survey (2018)

1 point; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

The Art, Science, and Engineering of Fuzzing: A Survey — mentioned by matt_d

Thu, 29 Aug 2019 16:15:51 GMT

"Generating Software Tests" (https://www.fuzzingbook.org/) is pretty great (independent of your programming language) - arguably a must read for anyone interested in software testing. John Regehr (the author of the blog post) has written more great posts: - How to Fuzz an ADT Implementation - https://blog.regehr.org/archives/896 - Better Random Testing by Leaving Features Out - https://blog.regehr.org/archives/591 - Tricking a Whitebox Testcase Generator - https://blog.regehr.org/archives/672 - Fuzzers Need Taming - https://blog.regehr.org/archives/925 - Levels of Fuzzing…

Paper and discussion history. A mention is not an endorsement.