Fuzzing 0x03 - Fuzzing, Emulation and QEMU
Channel: Chris Powell
Date: 29/07/2020

Fuzzing 0x03 notes and video. 

It covers the basics of fuzzing without access to source code, as it the case with Windows applications. And how emulation and QEMU works.

Notes https://drive.google.com/file/d/1QXc4GejhgQAyQ2PPZ-k3egg-hk70-oSl/view

For security training or consultancy, please visit us at — https://www.codalabs.uk. 

If you'd like to keep informed of upcoming material, training sessions or blogs, feel free to follow me on LinkedIn — https://www.linkedin.com/in/chris-cyber-researcher. Or if you'd prefer email updates, you can sign up to our mailing list — https://eepurl.com/g37-YX


00:00 Introduction
08:42 Finite State Machine "FSM" example
14:41 Push down machines
17:42 Turing machines
23:39 Turing completeness
29:00 Instruction Set Architectures "ISAs"
33:38 Emulation
36:45 Cross-compilation
41:01 Compiling for ARM
51:59 QEMU ARM example
53:00 More emulation
55:35 Instrumentation without source code
57:11 QEMU tracing
01:03:09 Debugging ARM binaries with QEMU
01:06:57 AFL fuzzing with QEMU
01:10:40 Fuzzle
01:13:21 AFL QEMU example
01:20:52 Emulated library fuzzing
01:26:16 Goodbye