Скачать или смотреть TenguCon 2.0 - Zero-Day Hunting with AFL-Fuzz - Khalilov Moe

Zero-Day Hunting with AFL-Fuzz: Uncovering Vulnerabilities in Open Source Software

This talk explores the challenges and solutions in fuzzing large-scale applications by leveraging efficient fuzzing methodically using various tools, including symbolic and concolic execution techniques. We will focus on the importance of creating an effective fuzzing corpus through path discovery and demonstrate how tools like the Z3 theorem solver can be utilized to generate better inputs. These optimized corpora significantly enhance fuzzing efficiency by improving coverage and uncovering deeper vulnerabilities. A live demonstration using SQLite will showcase practical strategies for integrating symbolic execution and Z3 into real-world fuzzing workflows.