Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


HTML
<div style="background-color: yellow; border: 2px solid red; margin: 4px; padding: 2px; font-weight: bold; text-align: center;">
This page was moved to <a href="

The easiest way to get BFF up and running is to use the DebianFuzz
virtual machine.  However, if this is not an option for you, it should
possible to run BFF on any UNIX-like operating system, as long as the
dependencies are met.

Dependencies

For basic fuzzing functionality, the following packages are required:

  • Python 2.7
  • Python Numpy
  • Python Scipy
  • Python Yaml
  • gdb 7.1 or later
  • zzuf (patched by CERT)

...

  • svn
  • gcc
  • make
  • automake
  • libtool
  • gcc-c++
  • ncurses-devel

...

  • Python hcluster
  • Python matplotlib

Filesystem layout

...

Beginning a fuzzing campaign

...

  • The Fluxbox window manager is used instead of the heavy Gnome or KDE desktop environments.
  • Fluxbox is configured to not raise or focus new windows. This can help in situations where you may need to interact with the guest OS while a GUI application is being fuzzed.

  • Memory randomization is disabled (kernel.randomize_va_space = 0 in /etc/sysctl.conf). This helps remove duplicate crashes where the target application does not have debug symbols.

  • VMware Tools is installed, which allows the guest OS to share a directory with the host.

  • The OS is configured to automatically log in and start X.
  • sudo is configured to not prompt for a password.
  • strip is symlinked to /bin/true, which prevents symbols from being removed when an application is built.

...

https://github.com/

...

CERTCC/

...

certfuzz/blob/main/src/linux/INSTALL">https://github.com/CERTCC/certfuzz/blob/main/src/linux/INSTALL</a>
<br>
Click in the link above if you are not automatically redirected in 10 seconds.
</div>
<meta http-equiv="refresh" content="10; URL='https://github.com/CERTCC/certfuzz/blob/main/src/linux/INSTALL'" />