Fuzzing with AFL (American Fuzzy Lop)

Instructors - Jakub Botwicz & Wojciech Rauner

Pre-Requisites - None

Abstract - This workshop will give participants information how to use afl (American fuzzy lop) to identify vulnerabilities in different applications and modules.
afl is a security-oriented fuzzer, that allows to efficiently and automatically test software components allowing to find interesting security issues.
It is one of leading tools and essential component in the toolbox of security researcher and hacker (penetration tester).
List of afl trophies (issues found using afl) can be read at: http://lcamtuf.coredump.cx/afl/
Participants will have possibility to learn how afl works and how to use it successfully based on real life cases - vulnerabilities found by trainers in different open source components.
During the training multiple cases and tips will be presented (see detailed outline for more complete list).

Required Materials - To participate in the hands-on sections, attendees need to bring a laptop with minimum 2 GB RAM which can run a virtual machine or a Docker container.
Virtual machine and Docker container with all necessary tools will be provided before the workshop.