TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

What afl-fuzz is bad at

54 点作者 doty大约 10 年前

2 条评论

dfc大约 10 年前
I wish there was an afl-fuzz like tool for fuzzing network traffic. By afl-fuzz for network traffic I mean a general purpose network fuzzer; not protocol specific fuzzer like the codenomicon ipsec fuzzer. Does anyone know of anything close? Remotely close?<p>There seems to be a significant overlap in what you would want from a network protocol fuzzer and a tool to reverse engineer a network protocol. Netzob is the only protocol RE tool that I know of and it seems that development has stalled.
评论 #9554517 未加载
评论 #9490881 未加载
评论 #9492869 未加载
vezzy-fnord大约 10 年前
I don&#x27;t see why afl-fuzz needs to be turned into a general-purpose Swiss Army Knife framework. It excels quite well at mutation-based techniques that train themselves on resulting outputs. For problems that involve specifically triggering code branches, then a tool that employs symbolic execution methods via constraint solving should be used instead, as the author implies.
评论 #9490289 未加载