{"id":3017,"date":"2015-05-26T02:42:29","date_gmt":"2015-05-25T18:42:29","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3017"},"modified":"2015-05-26T02:42:35","modified_gmt":"2015-05-25T18:42:35","slug":"zzuf-multi-purpose-application-input-fuzzing-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2015\/05\/zzuf-multi-purpose-application-input-fuzzing-tool\/","title":{"rendered":"zzuf &#8211; Multi-Purpose Application Input Fuzzing Tool"},"content":{"rendered":"<p>zzuf is a transparent application input fuzzing tool or fuzzer. Its purpose is to find bugs in applications by corrupting their user-contributed data (which more than often comes from untrusted sources on the Internet). It works by intercepting file and network operations and changing random bits in the program\u2019s input.<\/p>\n<p>zzuf\u2019s behaviour is deterministic, making it easier to reproduce bugs.<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/farm9.staticflickr.com\/8871\/17903157438_c9ce44bb7e.jpg\" alt=\"zzuf - Multi-Purpose Application Input Fuzzing Tool\" \/><\/p>\n<p>Its main areas of use are:<\/p>\n<ul>\n<li><strong>quality assurance:<\/strong> use zzuf to test existing software, or integrate it into your own software\u2019s testsuite<\/li>\n<li><strong>security:<\/strong> very often, segmentation faults or memory corruption issues mean a potential security hole, zzuf helps exposing some of them<\/li>\n<li><strong>code coverage analysis:<\/strong> use zzuf to maximise code coverage<\/li>\n<\/ul>\n<p>zzuf\u2019s primary target is media players, image viewers and web browsers, because the data they process is inherently insecure, but it was also successfully used to find bugs in system utilities such as objdump.<\/p>\n<p>zzuf is not rocket science: the idea of fuzzing input data is barely new, but zzuf\u2019s main purpose is to make things easier and automated.<\/p>\n<p>You can download zzuf here:<\/p>\n<p>Mac OS X universal binary: <a href=\"http:\/\/caca.zoy.org\/files\/zzuf\/zzuf-osx-0.13.tar.gz\">zzuf-osx-0.13.tar.gz<\/a><br \/>\nLatest Source from Github: <a href=\"https:\/\/github.com\/samhocevar\/zzuf\/archive\/master.zip\">master.zip<\/a><\/p>\n<p>Or read more <a href=\"http:\/\/caca.zoy.org\/wiki\/zzuf\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>zzuf is a transparent application input fuzzing tool or fuzzer. Its purpose is to find bugs in applications by corrupting their user-contributed data (which more than often comes from untrusted sources on the Internet). It works by intercepting file and network operations and changing random bits in the program\u2019s input. zzuf\u2019s behaviour is deterministic, making [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"zzuf is a transparent application input fuzzing tool or fuzzer. Its purpose is to find bugs in applications by corrupting their user-contributed data.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9,29],"tags":[1278,1277,2226],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3017"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=3017"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3017\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=3017"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=3017"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=3017"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}