Fuzz Anything with the Defensics SDK - Seguridad Mania.com - España y América Latina

One challenge of fuzzing is figuring out which malformed inputs (test cases) to use. Generational (or model-based) fuzzing tools use a detailed data model to generate high quality test cases. Because test cases are mostly correct, they traverse a variety of control paths and can drive the target software into a variety of states before “detonating” with a carefully placed anomaly. Defensics is a generational fuzzer with over 250 test suites for a wide variety of network protocols and file formats. But what if you need to fuzz something with no corresponding test suite? For proprietary protocols and other specialized fuzzing needs, the Defensics SDK enables you to apply the power of Defensics to any data model you wish. This presentation outlines the capabilities of the Defensics SDK and shows how data models and semantics can be defined in code, allowing you to fuzz any type of software in any context.