FUZZING Master One of Today? S Mechanical is Able to Disclose Security Disability! Fuzzing has evolved into one of these days? S is the most effective approaches to test software security. In this book, renowned fuzzing experts show you how to use fuzzing to reveal weaknesses in your software before someone else does not. Fuzzing is the first and only book to cover fuzzing from start to finish, bringing disciplined best practices to a technique that has traditionally been implemented informally. Coverage includes: ? Why fuzzing simplifies test design and capture the weakness of the other methods miss ? Mastering in-memory fuzzing techniques ? Implementing intelligent fault detection Attackers are already using fuzzing. Do you? Back developer, security engineer, tester, or QA specialist, this book teaches you how to build secure software. Preface xix Introduction xxi Acknowledgments XXV About the Author xxvii P ARTI B 1 ACKGROUND Chapter 1 Vulnerability Discovery Methodologies 3 Chapter 2 Is Fuzzing? 21 Chapter 3 Fuzzing Methods and Types Fuzzer 33 Chapter 4 Data Representation and Analysis 45 Chapter 5 Requirements for Effective Fuzzing 61 P ART II T ARGETS AND A UTOMATION 71 Chapter 6 Automation and Data Generation 73 Chapter 7 Environment Variable and Argument Fuzzing 89 Chapter 8 Environment Variable and Argument Fuzzing: Automation 103 Chapter 9 Web Application and Server Fuzzing 113 Chapter 10 Web Application and Server Fuzzing: Automation 137 Chapter 11 File Format Fuzzing 169 Chapter 12 File Format Fuzzing: Automation on UNIX 181 Chapter 13 File Format Fuzzing: Automation on Windows 197 Chapter 14 Network Protocol Fuzzing 223 Chapter 15 Network Protocol Fuzzing: Automation on UNIX 235 Chapter 16 Network Protocol Fuzzing: Automation on Windows 249 Chapter 17 Web Browser Fuzzing 267 Chapter 18 Web Browser Fuzzing: Automation 283 Chapter 19 In-Memory Fuzzing 301 Chapter 20 In-Memory Fuzzing: Automation 315 P ART III A dvanced T 349 F UZZING ECHNOLOGIES Chapter 21: Fuzzing Frameworks 351 Chapter 22 Automated Protocol Cutting 419 Chapter 23 Fuzzer Tracking 437 Chapter 24 Intelligent Fault Detection 471 P ART IV L OOKING F 495 ORWARD Chapter 25 Lesson 497 Chapter 26 Looking Forward 507 Index 519