zzuf

zzuf is a transparent application input fuzzer. Its purpose is to find bugs in applications by corrupting their user-contributed data (which more than often comes from untrusted sources on the Internet). It works by intercepting file and network operations and changing random bits in the program’s input. zzuf’s behaviour is deterministic, making it easier to reproduce bugs. Its main areas of use are:

zzuf’s primary target is media players, image viewers and web browsers, because the data they process is inherently insecure, but it was also successfully used to find bugs in system utilities such as objdump.


author
Sam Hocevar
url

http://caca.zoy.org/wiki/zzuf

appeared
2006-12-13
last update
2010-01.31
python
perl
sh
477
c
5647
ruby
pascal
50
bugs


CategoryFuzzer