A New Fuzzing Method Driven by Payload’s Integrity Focus on Logic Bugs
summary
Describes a new fuzzing technique from Ant Financial that targets logic vulnerabilities by assessing and preserving payload integrity rather than relying on coverage-guided fuzzing. Explains how the method automatically generates and mutates inputs with attention to payload structure to find logically incorrect behaviors in mobile/web services.
AI-written summary · about
chapters (5)
- 0:00Start
- 0:06Mario Fuzzer: A New Fuzzing Method Driven By Payload's Integrity Focus On Logic Bugs
- 3:06Logic Vulnerability Within the range allowed by the logic, through the norn execution path, the attack effect is achieved. • Business logic defect - Payment, Landing, Verification, Recover password logic • Code/Data Injection
- 11:42Know the entrances of program - Know the address of possible vulnerabilities - know what generic payload can invoke the vulnerabilities
- 19:38Android Application Security . Feature of logic vulnerability • Limitations of coverage-guided fuzzing methods • A new feedback fuzzing and the method to get it • New seed Scheduling based on new feedback
