Viewing profile — evmunro

Great idea to make it just a simple URL change. Reminds me of the youtube download websites. I made a similar CLI tool[0] with the added feature that you can pass `--outline` and i…

You're right, it's likely that almost nobody is using `fmt.Sprintf` to build SQL queries in production. Templating and `fmt.Sprintf` are essentially the same thing in this context …

This is a great resource on fuzz testing algorithms & internals. I find myself coming back to it occasionally when building new fuzzing techniques at Fuzzbuzz.

OP and Founder of Fuzzbuzz here - let me know if you have any questions about fuzz testing, especially any particularly tricky cases you’ve run into.

I agree - I took a look at the minimization algorithm[0] and it seems like it loops through a few basic options, with the last one basically normalizing all possible bytes to somet…

I noticed that as well - most fuzzers will have a maximum duration or number of iterations they're allowed to attempt when minimizing so as not to starve out actual inputs. It coul…

Thanks for the questions & feedback! Concise docs are really important so this is all super useful. To answer your questions one by one: 1) The BrokenMethods are simple examples of…

Sure! Some of the classes of bugs that remain low-hanging fruit for languages like Python include slowness, hangs, panics, race conditions, assert failures, excessive resource cons…

Radamsa is awesome! Definitely agree, and one of the goals for Fuzzbuzz is to be able to hot-swap between fuzzing backends without any interface changes (or to use all backends at …

Thanks for the link! We've been looking at all the current AFL-like/AFL wrappers for Java as we decide how best to implement Java fuzzing in Fuzzbuzz, and yours looks pretty nice. …

Memory security issues have been the main focus of fuzzing, but it's really useful for other use cases as well, such as: slowness/hangs, assert failures, panics, excessive resource…

We have! afl.rs[1] is awesome, and seeing as it's found some interesting bugs, I think Rust would be a great addition to Fuzzbuzz. It's on our roadmap. [1] https://github.com/rust-…

Yep, we're definitely going to integrate more automated analysis. As of now we do some rudimentary analysis based off the type of the bug (Heap buffer overflow, UAF), read/write si…

Thanks for mentioning us on the issue! I'd love to help get that project up and fuzzing

We actually distribute the fuzzing workload across physical machines, for precisely that reason. Each instance of AFL gets its own kernel & physical core, and we use a staged synch…

If you're interested in giving it a go, I could set you up with an OSS plan & some free CPU power - let me know! everest@fuzzbuzz.io

Really interesting to see the desire for ruby support in this thread! It's definitely on our roadmap. Shoot me an email at everest@fuzzbuzz.io and I'll let you know when we launch …

They certainly could if their project is large enough! Every widely-used C/C++ project should use OSS-Fuzz, it's an awesome service. We support a couple of languages that OSS-Fuzz …

We're already sort of integrated with GitHub, since you can integrate your projects to automatically pull updates from repositories, so GitHub login is definitely on the roadmap!

Since the type of fuzzing you can do right now on Fuzzbuzz is language-specific, you wouldn't be able to fuzz Javascript code. We are in the process of building a fuzzer for generi…

That's a problem that we've been thinking about a lot. The way our fuzzing works right now is that your method consumes an array of bytes, which you can then use to build up arbitr…