Fuzzing stateful systems: noPac, Part 2: exhaustive enumeration
Structured fuzzing of stateful systems using the noPac logic-bug in Active Directory as example. Part 2: exhaustive enumeration and better search space pruning.
Hi there, I’m Stefan. Here I’m writing about various programming-related stuff I find interesting. For many topics, I’m posting as I go and test things out, to learn and organize my thoughts; so don’t expect fully fleshed out entries. Opinions are my own.
Fuzzing stateful systems: noPac, Part 1: blind random search
Structured fuzzing of stateful systems using the noPac logic-bug in Active Directory as example. Part 1: (almost) blind random search.
Differential Fuzzing of URL Parsers (Chromium/Go) Part 1
Writing a coverage-guided fuzzer in LibAFL for differential URL parsing of Chromium GURL against Go net/url: Basic fuzzer infrastructure; byte input; structured output; a running fuzz-loop.
Git Transfer Protocols
How git transfers data over the network during remote repository operations like clone/fetch/pull/push: packet-line framing, the v2 wire protocol, pack-files, sideband channels.