Dobin Rutishauser

For a start, maybe include a description on what it can / should do, like two paragraphs. Some title's for the gif's would be useful too, so we know what...

Cannot reproduce at home. Probably usual Burp bug.

Hey. I didnt understand your solution. It was solved by compiling your target program with honggfuzz-gcc? Because it didnt work when using honggfuzz-clang, because you compililed honggfuzz with gcc? That...

Yes, this is kinda intentional. I think there may be better tools to suit attacking non-local network servers, such as: * Peach * Sulley * Mutiny May I inquire if...

I kinda liked mutiny, from Cisco-Talos. Ah, and it was like Spike -> Sulley -> Boofuzz, so boofuzz is newest. https://github.com/jtpereyda/boofuzz Also https://github.com/denandz/fuzzotron

This includes: Add option "type": "gen"/"mut" to fuzzer definitions: * https://github.com/dobin/ffw/blob/master/fuzzer/fuzzingiterationdata.py#L11 Handle the type in fuzzingiterationdata::fuzzData(). If "gen": * e.g. remove _chooseInput(): https://github.com/dobin/ffw/blob/master/fuzzer/fuzzingiterationdata.py#L90 * e.g. ignore "no client message check":...

The first idea, as depicted here and implemented in 1bd4393 was not a good idea. 4e9e5b37a686136f32f8fcf47385cac9f8f00738 fixes it partially. I just created a fake network message structure (data.pickle) in fuzzingmaster.py....

Note: Fenrir broke generative fuzzers, i think. I'll either remove it completely, or re-active it later.

asan issue: https://github.com/google/sanitizers/issues/931 project: https://github.com/dobin/asanparser

The data is stored in a .pickle file, you can write your own wrapper to read and send it, without being dependent on FFW. What exactly was the problem, with...