aboutsummaryrefslogtreecommitdiff
path: root/socketfuzzer
AgeCommit message (Collapse)Author
2024-10-10socketfuzzer/socketclient: migration honggfuzz_socketclinet.py to python3, ↵Chinsyo
refactor to get closer with `PEP8`
2023-09-25clang-format: IndentCaseLabels: falseRobert Swiecki
2020-12-01Fix documentation to reflect removed optionjmccl
2020-04-29New directives in .clang-formatRobert Swiecki
2020-01-18socketfuzzer/vulnserver_cov: check for failing malloc()Robert Swiecki
2019-06-08fix for #253dobin
2018-10-17Fix socketfuzzer test code for interactive modePrashast
2018-08-23sancov: remove, since it's old (clang-4), slower, and requires complex code. ↵Robert Swiecki
Android seems to be supporting in-process counters now
2018-04-14support for multiple parallel honggfuzz processes in socketfuzzer modedobin
Adds pid to socket used for socketfuzzer mode, so it is possible to start and use multiple honggfuzz instances at the same time.
2018-01-21make indent dependRobert Swiecki
2018-01-21Support external fuzzer and provide code coveragedobin
Aka The FFW honggfuzz patch. This proposed patch for honggfuzz is used by the fuzzing for worms (FFW) framework available here: github.com/dobin/ffw This patch makes it possible to use honggfuzz as a code coverage tool for long-living (network-) servers. It provides the following functionality: * A socket interface for an external fuzzer * Support for code coverage of long living processes The socket interface supports the following messages: * Honggfuzz -> Fuzzer: "Fuzz": Send fuzz data to target * Honggfuzz -> Fuzzer: "Cras": Target crashed * Honggfuzz -> Fuzzer: "New!": New basic block reached * Fuzzer -> Honggfuzz: "okay": Fuzzer sent his stuff to target * Fuzzer -> Honggfuzz: "bad!": The server is unreachable Honggfuzz will implement the following tasks: * Start the target * Restart the target if it crashes * Restart the target if a crash/hang is detected by the fuzzer * Provide code coverage information about new basic blocks An example vulnerable server plus tests have been provided in the `socketfuzzer/` directory.