using AFL to generate XML

482 views
Skip to first unread message

srwx...@gmail.com

unread,
Mar 5, 2017, 12:08:31 PM3/5/17
to afl-users
There is an articled published in 2015 about manually crafting SQL dictionary for fuzzing. 
"afl-fuzz: making up grammar with a dictionary in hand". (https://lcamtuf.blogspot.com/2015/01/afl-fuzz-making-up-grammar-with.html).

Similarly, (well, not quite), I am particularly interested in generating XML as input for my target. Has there been any active development with regard to this aspect? Or is it still need more work?

By the way, could anyone help me resolve a bad link in the above page (the bad link is: http://lists.cs.uiuc.edu/pipermail/llvmdev/2014-December/079421.html, which href-ed by keywords "surprisingly good ") in the article. 

The latest example of using AFL to fuzz an XML paser is this: http://neilmitchell.blogspot.com/2016/12/fuzz-testing-hexml-with-afl.html, but I cannot find any follow ups and details, since it is relatively new.

Thanks,

Dan

Heiko Eißfeldt

unread,
Mar 6, 2017, 8:51:51 AM3/6/17
to afl-users
for the bad link try this:

Best regards, Heiko

Nicolas Grégoire

unread,
Mar 8, 2017, 1:34:09 PM3/8/17
to afl-...@googlegroups.com

> Similarly, (well, not quite), I am particularly interested in
> generating XML as input for my target. Has there been any active
> development with regard to this aspect? Or is it still need more
> work?

Do you want to fuzz the parser itself, or an application using a file
format based on XML?

NIcolas
Reply all
Reply to author
Forward
0 new messages