Introduction to Browser Fuzzing

•

9 gostaram•7,709 visualizações

n|u - The Open Security Community

null Banglore Chapter - December 2012 Meet

Educação

• What ever I am going to discuss in this presentation are my own
views about fuzzing. Fuzzing is not unique or dark magic. It is
known for years now.

• What is fuzzing

• Why Fuzzing

• Why Fuzz Browsers

• How To Fuzz Browser

• What Is Outcome

• Sort of Laziness

• Stress Testing

• Penetration Testing

• Evilness with good coding

• Bad Inputs for good Output 

• To uncover security bugs

• For Securing our self (also others in some cases)

• Checking Robustness of the product

• Find bugs before some one exploit you

• Weakest Entry Point for any Internet Connected
Computer/Laptop

• Its fun to see some good codes doing bad stuff then the bad
files doing bad stuff.

• Browsers are easy to understand as we use it everyday

• No special configuration required on computer

• You have multiple targets

• Currently it is hot in the market

• Learn JavaScript Programming with bad logic

• Create Good Codes Doing Bad Stuff

• Create Fuzzer and launch it against targeted browser

• Static Fuzzer(Mutation Based Fuzzing) & Dynamic Fuzzer

• Collect various templates

• Create multiple mutations for each templates for increasing test
cases

• Need to Load each test case into browser

• Time Consuming and resource consuming

• Browser Fuzzer 3 (bf3) is a comprehensive web browser fuzzer
that fuzzes CSS, DOM, HTML and JavaScript developed by
Jeremy Brown.

• Good Tutorial with example by Abyssec
http://www.abysssec.com/blog/2009/08/21/how-to-write-
browser-fuzzer/

• Dynamic Fuzzer creates test cases inside browsers

• Require less resources

• Less attention required

• Few files together do great work

• Grinder Developed By Stephen Fewer

• JsFunFuzz Developed By Jesse Ruderman

• Cross_Fuzz By Michal Zalewski

• Buffer Overflows

• Integer Overflow

• Use After Free

• Heap Overflow

• Out Of Bound Read

• Pinkie Pie Won $60000x2 times in pwnium

• Pwn2Own

• Google Chromium/Mozilla Firefox Bug Bounties

• Zero Day Initiative

• IDefense

• Exodus Intelligence

• Find Me @

41.w4r10r@gmail.com
OR
www.garage4hackers.com
OR
Twitter : @41w4r10r

Mais conteúdo relacionado

Mais procurados

Frans Rosén Keynote at BSides AhmedabadSecurity BSides Ahmedabad

Penetration testing web application web application (in) securityNahidul Kibria

Hacking Adobe Experience Manager sitesMikhail Egorov

Cross site scripting attacks and defensesMohammed A. Imran

DNS hijacking using cloud providers – No verification neededFrans Rosén

Secure coding presentation Oct 3 2020Moataz Kamel

OWASP Secure Coding Practices - Quick Reference GuideLudovic Petit

Offzone | Another waf bypassДмитрий Бумов

IDA Vulnerabilities and Bug Bounty　 by Masaaki ChidaCODE BLUE

"15 Technique to Exploit File Upload Pages", Ebrahim HegazyHackIT Ukraine

HTTP Security Headers Every Java Developer Must KnowAyoma Wijethunga

Securing AEM webapps by hacking themMikhail Egorov

Bypass file upload restrictionsMukesh k.r

OWASP AppSecCali 2015 - Marshalling PicklesChristopher Frohoff

HTTP Security HeadersIsmael Goncalves

How to steal and modify data using Business Logic flaws - Insecure Direct Obj...Frans Rosén

Defending against Java Deserialization VulnerabilitiesLuca Carettoni

Waf bypassing TechniquesAvinash Thapa

WAF Bypass Techniques - Using HTTP Standard and Web Servers’ BehaviourSoroush Dalili

How to Test for The OWASP Top TenSecurity Innovation

Mais procurados (20)

Frans Rosén Keynote at BSides Ahmedabad

Penetration testing web application web application (in) security

Hacking Adobe Experience Manager sites

Cross site scripting attacks and defenses

DNS hijacking using cloud providers – No verification needed

Secure coding presentation Oct 3 2020

OWASP Secure Coding Practices - Quick Reference Guide

Offzone | Another waf bypass

IDA Vulnerabilities and Bug Bounty　 by Masaaki Chida

"15 Technique to Exploit File Upload Pages", Ebrahim Hegazy

HTTP Security Headers Every Java Developer Must Know

Securing AEM webapps by hacking them

Bypass file upload restrictions

OWASP AppSecCali 2015 - Marshalling Pickles

HTTP Security Headers

How to steal and modify data using Business Logic flaws - Insecure Direct Obj...

Defending against Java Deserialization Vulnerabilities

Waf bypassing Techniques

WAF Bypass Techniques - Using HTTP Standard and Web Servers’ Behaviour

How to Test for The OWASP Top Ten

Destaque

Browser Fuzzing with a Twist (and a Shake) -- ZeroNights 2015Jeremy Brown

0-knowledge fuzzingVincenzo Iozzo

Distributed Fuzzing Framework Designbannedit

Fuzzinator - In bug we trust.Renata Hodovan

FuzzingKhalegh Salehi

FUZZING & SOFTWARE SECURITY TESTINGMuH4f1Z

Introduction to mysql part 2baabtra.com - No. 1 supplier of quality freshers

Introduction to TorJaskaran Narula

Gareth hayes. non alphanumeric javascript-php and shared fuzzingYury Chemerkin

Security Testing: FuzzingAndrei Rubaniuk

Fuzzing sucks!Yury Chemerkin

MBFuzzer : MITM Fuzzing for Mobile ApplicationsFatih Ozavci

VoIP Wars: Destroying Jar Jar Lync (Filtered version)Fatih Ozavci

VoIP Wars: Destroying Jar Jar Lync (Unfiltered version)Fatih Ozavci

CSW2017 Peng qiu+shefang-zhong win32k -dark_composition_finnal_finnal_rm_markCanSecWest

Volatile Memory: Behavioral Game Theory in Defensive SecurityKelly Shortridge

CBA PP BrandedPeter McMaster QC

Top 8 chief business development officer resume samplesporichfergu

Oppa (13)qmffocj456

Assistive technologies for students with special needsrpittma12

Destaque (20)

Browser Fuzzing with a Twist (and a Shake) -- ZeroNights 2015

0-knowledge fuzzing

Distributed Fuzzing Framework Design

Fuzzinator - In bug we trust.

Fuzzing

FUZZING & SOFTWARE SECURITY TESTING

Introduction to mysql part 2

Introduction to Tor

Gareth hayes. non alphanumeric javascript-php and shared fuzzing

Security Testing: Fuzzing

Fuzzing sucks!

MBFuzzer : MITM Fuzzing for Mobile Applications

VoIP Wars: Destroying Jar Jar Lync (Filtered version)

VoIP Wars: Destroying Jar Jar Lync (Unfiltered version)

CSW2017 Peng qiu+shefang-zhong win32k -dark_composition_finnal_finnal_rm_mark

Volatile Memory: Behavioral Game Theory in Defensive Security

CBA PP Branded

Top 8 chief business development officer resume samples

Oppa (13)

Assistive technologies for students with special needs

Semelhante a Introduction to Browser Fuzzing

Hacktivityonly 121013141039-phpapp02Комсс Файквэе

[ENG] Zombie browsers spiced with rootkit extensions - Hacktivity 2012Zoltan Balazs

[ENG] Hacker halted 2012 - Zombie browsers, spiced with rootkit extensionsZoltan Balazs

Zombie browsers spiced with rootkit extensions - DefCamp 2012DefCamp

Sandbox detection: leak, abuse, test - Hacktivity 2015Zoltan Balazs

Inspect The Uninspectedcgack

Mobile Knife Fighting at JSConf US Brian LeRoux

JavaScript debugging diagnostic web tools and firefoxGennady Feldman

W3C HTML5 KIG-The near future of the web platformChanghwan Yi

Forensics WS ConsolidatedKarter Rohrer

BSides Lisbon 2013 - All your sites belong to BurpTiago Mendo

DjangoSkiBrian LeRoux

Rise of the hybridsOron Ben Zvi

Familiarization with Web ToolsMarlon Jamera

Web browser showdownSkokie Public Library

11 Amazing things I Learnt At Word Camp Sydney 2014WordPressBrisbane

Webdriver.ioSteven Noble

Nguyen phuong truong anh a story of bug bounty hunterSecurity Bootcamp

Development of automated tests for ext js based web sitesISsoft

Getting started with dev tools (atl)Thinkful

Semelhante a Introduction to Browser Fuzzing (20)

Hacktivityonly 121013141039-phpapp02

[ENG] Zombie browsers spiced with rootkit extensions - Hacktivity 2012

[ENG] Hacker halted 2012 - Zombie browsers, spiced with rootkit extensions

Zombie browsers spiced with rootkit extensions - DefCamp 2012

Sandbox detection: leak, abuse, test - Hacktivity 2015

Inspect The Uninspected

Mobile Knife Fighting at JSConf US

JavaScript debugging diagnostic web tools and firefox

W3C HTML5 KIG-The near future of the web platform

Forensics WS Consolidated

BSides Lisbon 2013 - All your sites belong to Burp

DjangoSki

Rise of the hybrids

Familiarization with Web Tools

Web browser showdown

11 Amazing things I Learnt At Word Camp Sydney 2014

Webdriver.io

Nguyen phuong truong anh a story of bug bounty hunter

Development of automated tests for ext js based web sites

Getting started with dev tools (atl)

Mais de n|u - The Open Security Community

Hardware security testing 101 (Null - Delhi Chapter)n|u - The Open Security Community

Osint primern|u - The Open Security Community

SSRF exploit the trust relationshipn|u - The Open Security Community

Nmap basicsn|u - The Open Security Community

Metasploit primaryn|u - The Open Security Community

Api security-testingn|u - The Open Security Community

Introduction to TLS 1.3n|u - The Open Security Community

Gibson 101 -quick_introduction_to_hacking_mainframes_in_2020_null_infosec_gir...n|u - The Open Security Community

Talking About SSRF,CRLFn|u - The Open Security Community

Building active directory lab for red teamingn|u - The Open Security Community

Owning a company through their logsn|u - The Open Security Community

Introduction to shodann|u - The Open Security Community

Cloud security n|u - The Open Security Community

Detecting persistence in windowsn|u - The Open Security Community

Frida - Objection Tool Usagen|u - The Open Security Community

OSQuery - Monitoring System Processn|u - The Open Security Community

DevSecOps Jenkins Pipeline -Securityn|u - The Open Security Community

Extensible markup language attacksn|u - The Open Security Community

Linux for hackersn|u - The Open Security Community

Android Pentestingn|u - The Open Security Community

Mais de n|u - The Open Security Community (20)

Hardware security testing 101 (Null - Delhi Chapter)

Osint primer

SSRF exploit the trust relationship

Nmap basics

Metasploit primary

Api security-testing

Introduction to TLS 1.3

Gibson 101 -quick_introduction_to_hacking_mainframes_in_2020_null_infosec_gir...

Talking About SSRF,CRLF

Building active directory lab for red teaming

Owning a company through their logs

Introduction to shodan

Cloud security

Detecting persistence in windows

Frida - Objection Tool Usage

OSQuery - Monitoring System Process

DevSecOps Jenkins Pipeline -Security

Extensible markup language attacks

Linux for hackers

Android Pentesting

Último

Mental Health Awareness - a toolkit for supporting young mindsPooky Knightsmith

Blowin' in the Wind of Caste_ Bob Dylan's Song as a Catalyst for Social Justi...DhatriParmar

Mattingly "AI & Prompt Design: Large Language Models"National Information Standards Organization (NISO)

Multi Domain Alias In the Odoo 17 ERP ModuleCeline George

4.11.24 Mass Incarceration and the New Jim Crow.pptxmary850239

Transaction Management in Database Management SystemChristalin Nelson

INCLUSIVE EDUCATION PRACTICES FOR TEACHERS AND TRAINERS.pptxExcellence Foundation for South Sudan

Measures of Position DECILES for ungrouped dataBabyAnnMotar

DIFFERENT BASKETRY IN THE PHILIPPINES PPT.pptxMichelleTuguinay1

Narcotic and Non Narcotic Analgesic..pdfPrerana Jadhav

4.16.24 21st Century Movements for Black Lives.pptxmary850239

How to Make a Duplicate of Your Odoo 17 DatabaseCeline George

Faculty Profile prashantha K EEE dept Sri Sairam college of EngineeringSri Sairam College Of Engineering Bengaluru

MS4 level being good citizen -imperative- (1) (1).pdfMr Bounab Samir

Man or Manufactured_ Redefining Humanity Through Biopunk Narratives.pptxDhatriParmar

INTRODUCTION TO CATHOLIC CHRISTOLOGY.pptxHumphrey A Beña

Reading and Writing Skills 11 quarter 4 melc 1GloryAnnCastre1

Scientific Writing :Research DiscourseAnita GoswamiGiri

Student Profile Sample - We help schools to connect the data they have, with ...Seán Kennedy

ESP 4-EDITED.pdfmmcncncncmcmmnmnmncnmncmnnjvnnvRicaMaeCastro1

Introduction to Browser Fuzzing

1. By - Anil Aphale aka 41.w4r10r

2. • What ever I am going to discuss in this presentation are my own views about fuzzing. Fuzzing is not unique or dark magic. It is known for years now.

3. • What is fuzzing • Why Fuzzing • Why Fuzz Browsers • How To Fuzz Browser • What Is Outcome

4. • Sort of Laziness • Stress Testing • Penetration Testing • Evilness with good coding • Bad Inputs for good Output 

5. • To uncover security bugs • For Securing our self (also others in some cases) • Checking Robustness of the product • Find bugs before some one exploit you

6. $$$

7. • Weakest Entry Point for any Internet Connected Computer/Laptop • Its fun to see some good codes doing bad stuff then the bad files doing bad stuff. • Browsers are easy to understand as we use it everyday • No special configuration required on computer

8. • You have multiple targets • Currently it is hot in the market

9. • Learn JavaScript Programming with bad logic • Create Good Codes Doing Bad Stuff • Create Fuzzer and launch it against targeted browser • Static Fuzzer(Mutation Based Fuzzing) & Dynamic Fuzzer

10. • Collect various templates • Create multiple mutations for each templates for increasing test cases • Need to Load each test case into browser • Time Consuming and resource consuming

11. • Browser Fuzzer 3 (bf3) is a comprehensive web browser fuzzer that fuzzes CSS, DOM, HTML and JavaScript developed by Jeremy Brown. • Good Tutorial with example by Abyssec http://www.abysssec.com/blog/2009/08/21/how-to-write- browser-fuzzer/

12. • Dynamic Fuzzer creates test cases inside browsers • Require less resources • Less attention required • Few files together do great work

13. • Grinder Developed By Stephen Fewer • JsFunFuzz Developed By Jesse Ruderman • Cross_Fuzz By Michal Zalewski

14. • Buffer Overflows • Integer Overflow • Use After Free • Heap Overflow • Out Of Bound Read

15. $$$

16. • Pinkie Pie Won $60000x2 times in pwnium • Pwn2Own • Google Chromium/Mozilla Firefox Bug Bounties • Zero Day Initiative • IDefense • Exodus Intelligence

17.

18. • Find Me @ 41.w4r10r@gmail.com OR www.garage4hackers.com OR Twitter : @41w4r10r

Introduction to Browser Fuzzing

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Destaque

Destaque (20)

Semelhante a Introduction to Browser Fuzzing

Semelhante a Introduction to Browser Fuzzing (20)

Mais de n|u - The Open Security Community

Mais de n|u - The Open Security Community (20)

Último

Último (20)

Introduction to Browser Fuzzing