Profile picture
Nicolas Grégoire @ LeHACK
@Agarri_FR
, 6 tweets, 2 min read Read on Twitter
A thread discussing the fuzzing of structured formats with AFL... ⤵️
AFL is known to work well with binary and/or dense formats. Fuzzing parsers (XML, JSON, ...) is doable using dictionnaries. However, most testcases will be invalid.
If the target requires valid files (ex: ImageMagick and SVG), this strategy will not work. Luckily, @choller published a patch providing a bridge to external Python mutators github.com/choller/afl
This feature is now integrated in AFL++, and a minimalist XML-aware mutator is provided (it can also be used as a XML-aware minimizer) github.com/vanhauser-thc/…
This mutator is based on the one I personally use. I presented it at @nullcon in 2017. The talk is on Youtube, here's the slides... agarri.fr/docs/XML_Fuzzi…
The real version is much better (look at the slides!) but this one is already fun to watch... Enjoy! #EndOfThread
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Nicolas Grégoire @ LeHACK
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#EndOfThread

Related threads

Profile picture
Capitalist Party of South Africa
@purplecowmobi
#Thread This is an important question, so let's unpack this.

1) It is our view that coalition politics are the way of stable democracies and the future of South Africa. Germany is a good example of how coalitions work.
2) The first half of the Mandela administration ticked a number of boxes in terms of how coalitions should work (although that was a Government of National Unity rather than a coalition). The cabinet had ANC, NP, and IFP ministers. It worked well.
3) A number of our municipalities are run by coalition governments. Some of these work well. Others are a disaster.
Read 10 tweets
Profile picture
Katharine Child
@katjanechild
#Thread There may have been sabotage last week, but a look at the power utilities report to Nersa paints Eskom on the brink of collapse. Eskom's own report describes a litany of severe faults with the new power stations' most important components...
So problem one is the technology Medupi was built with which is very modern technology... Way mismatched to the low grade coal quality in the ground at Lephalale. The Eskom report details poor coal is damaging every part of Kusile and Medupi.
Then Eskom admits that design and technical requirements are not met. The Mills to pulverise coals don't meet technical specs. The boilers' design means they overheat. Coal damages them. The filter plant to filter fumes is damaged by coal & excess ash builld up & trips often.
Read 11 tweets
Profile picture
Samuel Odusami
@samuelodusami
This is a news report on the suspended CJN Nigerian intellectuals are defending on Twitter. (Source: @SaharaReporters)

#Thread
'More Cash Found In CJN Onnoghen’s Accounts'
"There seems to be more to the allegations of fraudulent assets declaration charge against Walter Onnoghen, the Chief Justice of Nigeria (CJN), as dectectives may have found more undeclared funds in his accounts."
Read 21 tweets
Profile picture
interACT
@interACT_adv
Long #THREAD discussing questions:

💭 What is intersex?
💭Is ____ intersex?
Preface: everyone is different, this is of course one opinion. Also, while they are common themes among intersex people, medical trauma, non-consensual surgeries, or even a diagnosis are not requirements to ID as intersex, and we don't endorse gatekeeping.
What is or is not intersex is somewhat subjective. At its simplest, IDing as #intersex is about having experiences with your body's inherent sex differences, and if that word feels right to you.
Read 22 tweets
Profile picture
Subomi
@subomiplumptre
FAMILY, MINDSETS & GUILT TRIPS | If you're succeeding in life and trying to create a better life for your parents, siblings or extended family, you should read this. #Thread #NewYearResolutions #NewYear
One of the hardest things you'll come up against is mindset. It is what will cause you the most sorrow. Let me explain using a Nigerian example.
You believe one should have electricity for 24 hours a day. You have the financial means, so you can now attain this using a combination of PHCN, Generator, Inverter and Solar Panels.
Read 14 tweets
Profile picture
JAG
@JustAGurLnSwedn
THREAD... 👇👇👇👇
Now that the Midterms are approaching, I see the Bernie fanatics out in full force.
What's wrong with the Bernie Sect is they have NO nuance, and do not seem to understand the realities of politics.
It’s been easy for Bernie in a tiny state of less than half a million white people, as long as he supported guns, he would win re-election over and over, without having to work very hard.
It's how he could keep his purity mostly intact.
He's not known to work well with others.
My issue with the Bernie crowd is the LIES they tell.

They spent the entire primary lying so badly about Hillary, so they could drive her poll numbers down and Bernie's up.

Here's just a small taste of those lies, this from Jimmy Dore of the Young Turks:
Read 35 tweets

Trending hashtags

#nanowrimo #SteeleDossier #BoycottSundanceFestival #DigitalPatriots #Trends #Startups #MacronLeaks #brandfinancing #VLC #India #spirituality #MichaelJackson #Cohen #MAGA #Aadhaar #LeavingNeverland #KeralaFloods #WomeninSTEM #Russia #Kerala #InfoLocale #schoolshouldnevergavethememail #InfluencerMarketing #Mahabharata #digitaljobs
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!