Get the latest tech news
Build Simple Fuzzer (2020)
We are locked in our houses now and it is not easy. In situations like this it is important to have a pet project on the side so you don’t get crazy.
Second important thing is to pick a right target - we are going to use the exif library mentioned in h0mbre’s article because it was coded many years ago and will most likely spew crashes like there is no tomorrow. If you start with random data there is a good chance your fuzzer will spend most of the cycles producing files that target program will immediately discard because the first two magic bytes do not match expected value. When implementing magic numbers you have to decide if you want to manually split your values into bytes (hardcoding little endianess) or write smarter functions using binary shifts.
Or read this on Hacker News