dyjakan/interpreter-bugs

Fuzzing results for various interpreters.

interpreter-bugs

Fuzzing results for various interpreters.

Update

I gave a talk about this project at WarCon 2017. Slides are available. References section might come in handy.

methodology

My current approach is to run honggfuzz with radamsa on an existing template corpus. I usually go for 10M+ iterations (not much but servers cost money, duh).

Initial triage is done with exploitable and crashwalk.

Having all that in mind I doubt that there are any gems here (i.e. not only crashing but also reachable via user input).

Be my guest with regard to further analysis, IBB can't wait.

links

• Similar repository for PHP
• Similar repository for Python
• CrashingPython in the Python wiki

interpreter-bugs's Issues

Integrating Radamsa w/Honggfuzz

This is more of a question than an issue however,

I am currently working on integrating Radamsa with Honggfuzz but cannot seem to find any decent documentation on the best way to integrate them.

Are you aware of any decent documentation regarding integrating them to perform syntactically-correct test-case generation?

If not, could you point me in the right direction?

Thanks.