[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sat, 7 Mar 2015 21:22:30 +0800
From: Kai Zhao <loverszhao@...il.com>
To: john-dev@...ts.openwall.com
Subject: Any advice on how to fuzz john jumbo by AFL
Hi, I fuzzed john jumbo two days but without find any crashes. The fuzz
result indicates that john jumbo is robust or my fuzz test go somewhere
wrong place.
My fuzz testing steps as follows:
1. fuzz unshallow
1.1 fuzz time about 6 hours
1.2 no crash
2. fuzz john without any change
2.1 the input test is copy from the test cases in the src/*_fmt_plug.c
2.2 fuzz time about 20 hours
2.3 fuzz slow because the john try to crack the input files
2.4 no crash
3. fuzz john with change source code
3.1 I comment the line: john_run() in src/john.c in order to only
test the
john_init function which involves format valid
3.2 fuzz time about 6 hours
3.3 fuzz fast
3.4 no crash
Maybe you have some good advice on how to fuzz john. Thank you.
--
loverszhaokai
motto：You got a dream and you gotta protect it.
github：https://github.com/loverszhaokai
blog：http://www.cnblogs.com/lovers/
Content of type "text/html" skipped
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
