Workshop: Fuzz Testing for Finding Vulnerabilities

Prerequisites and Preparation Instructions

Each participant will have access to one NCL node which runs Ubuntu 14-04 64-bit and all required software packages. If you want to setup the same experimental environment on your PC/Laptop, please download and run this bash script.

• KLEE - symbolic execution engine


• AFL - coverage-based greybox fuzzing tool


• Peach - model-base black-box fuzzing tool


• Valgrind - dynamic analysis tool


• GDB - GNU debugger


• Radare2 - reverse engineering framework

All participants should go through the following tutorials to get familiar with essential software packages before attending the hackathon.

KLEE:

• Quickstart guide

AFL:

• Quickstart guide
• Technical details
• Fuzzing with AFL, a practical example

Peach:

• Quickstart guide
• Dumb fuzzing
• File fuzzing