Fuzz Testing for Fun and Profit
summary
Builds a lightweight fuzzing service that sits on top of an existing traffic-forking pipeline, applies fuzzdb attacks with insertion and generation manipulations, and runs reproducible seeded campaigns. Demonstrates finding multiple crashes (initially about eight P0s), memory leaks, XSS and SQLi vectors, and a cross-process memory contamination bug by making requests that stay valid to the HTTP/JSON model. Uses a .NET Core prototype (GitHub), recommends AFL/fuzzingbook/wrestler when applicable, and shows the approach integrates into CI/CD and actually drives fixes.
AI-written summary · about
chapters (7)
- 0:00Introduction to fuzzing
- 2:36Meet the speaker Melissa
- 12:13Fuzz testing basics
- 28:58Finding vulnerabilities
- 34:56Live fuzzing demo
- 43:49Tools and resources
- 45:37Q&A session
