Fuzzing FTW

Instructors - Bryce Kunz & Kevin Lustic

Pre-Requisites - Students need to be comfortable in Kali Linux which includes navigating the OS via the terminal.
An understanding of basic networking concepts (i.e TCP/IP) and the HTTP protocol is highly recommended.
Some knowledge of the Python scripting language is highly recommended.R26

Abstract - Join us in this hands-on introduction to fuzzing workshop, where we will explore how common fuzzing tools (e.g. AFL, libFuzzer, BooFuzz, etc..) are used to discover previously unknown bugs within applications.

We will first cover a general process to follow when fuzzing a targeted application and then provide hands-on labs where students will be able to apply this fuzzing process to quickly discover bugs within applications.

Several different fuzzing techniques will be covered including fuzzing file inputs via blind mutations (e.g. radamsa), fuzzing specific functions within an application via in-process evolutionary fuzzing (e.g. libFuzzer), compile-time instrumentation based fuzzing (e.g. AFL), and fuzzing of network services via generation based fuzzing (e.g. BooFuzz aka Sulley).

Required Materials - A laptop with the ability to copy a Virtual Machine (VM) off a USB drive and run the VM within VMware Workstation / Fusion or VirtualBox.
-- Students are required to bring their own laptops
-- A minimum of 8 GB RAM installed
-- At least 60 GB HD free
-- USB 2 or higher support
-- VMware Workstation / Fusion / VirtualBox installed
--- Tested on Windows 10 with VMware Workstation or VirtualBox.
--- Tested on macOS High Sierra with VMware Fusion or VirtualBox.