An Introduction to Fuzzers
summary
An introduction to fuzzers that explains how simple fuzzing tools work and what is needed to implement a basic but effective fuzzer that can find bugs. The talk names practical use cases—from student projects to complex web services—and aims to motivate attendees to try a fuzzer on real Java projects.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:06What are fuzzers
- 4:05Fuzzer levels
- 6:56Sorting example
- 8:18Building a simple fuzzer
- 11:09Error handling
- 15:07First bug found
- 17:35Testing Guava library
- 21:10Extending fuzzer for arrays
- 24:03FastJson bug
- 26:30Mutation testing
- 30:50Code instrumentation
- 35:50New bugs after instrumentation
- 36:55Using a dictionary
- 38:41Summary and conclusions
- 40:07Q&A
related talks
47mFuzzing Your Code
53mFuzzing 101
31m“Fuzz or lose..."
39mMaking Fuzzing Part of Your Software Development Lifecycle
39mFuzzing: Finding Your Own Bugs and 0days!
39mFuzzing Session: Finding Bugs and Vulnerabilities Automatically
44mFuzzing in Go: Fear, Despair, Acceptance and Long-Awaited Success ☠️
44mFuzzing in Go: Fear, Despair, Acceptance and the Long-Awaited Success