CERT Failure Observation Engine (FOE)
Significant changes
FOE 2.1 (September 23, 2013)
* Environment changes:
- Upgraded to MSEC !exploitable 1.6
* Code changes:
- Crash uniqueness determined by exception chains
- Improved exploitability bucketing of exception chains
- Dynamic timeouts (CPU-usage-driven) for GUI applications
- Zip seed file awareness (fuzz contents, not container)
- New and improved scripts in the tools directory
- Simplified usage
- Optional feature to recycle crashing test cases as seed files
- Minimization to string defaults to Metasploit string
- Various bug fixes and improved error handling
FOE 2.0.1 (October 19, 2012)
* Code changes:
- BFF 2.6 and FOE 2.0.1 use the same certfuzz package
- Fixed a bug in minimizer crash recycling
- Various bug fixes and improved error handling
FOE 2.0 (July 20, 2012)
* Environment changes:
- Upgraded to python 2.7
* Code changes:
- Improved support for multiple seed files
- Crashes found during minimization get analyzed as well
- Improved machine learning implementation applied to both
seed file selection and rangefinder
- Minimizer tuned for performance
- Optional minimization-to-string feature
- Continues handled exceptions
- Button clicker included
- New drillresults.py script for picking out interesting
crashes
- Added new fuzzers: drop, insert, truncate, verify
- Refactored into object-oriented code
- Merged in many other features from CERT's Basic Fuzzing Framework (BFF)
for Linux v2.5
FOE 1.0 (April 20, 2012)
* Initial Release
Overview
Content Tools