[Wireshark-dev] American Fuzzy Lop - Menagerie Minimization

2015-01-25 Thread Evan Huus
Gerald and I have (independently) started playing with the American
Fuzzy Lop fuzzer recently [1] as a possibly more intelligent
alternative or complement to our current fuzzing set-up.

It includes a tool afl-cmin that uses its instrumentation to find
unnecessary files in a set of inputs (i.e. files that don't exercise
any new paths compared to the rest of the inputs). As an experiment, I
ran this tool against tshark -nr on our currently available public
menagerie folder and it cut it about in half.

Before: 5726 files, 1.8G
After: 2423 files, 764M

I suspect with tshark -nxVr there are more paths and fewer
duplicates (and it would also take a lot longer to run the script) but
it may be worth investigating regardless. If anybody else is curious
about the results I've made the minimized file list available at [2].

Cheers,
Evan

[1] http://lcamtuf.coredump.cx/afl/
[2] https://dl.dropboxusercontent.com/u/171647/mini-menagerie
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe


Re: [Wireshark-dev] American Fuzzy Lop - Menagerie Minimization

2015-01-25 Thread Bálint Réczey
2015-01-25 15:41 GMT+01:00 Evan Huus eapa...@gmail.com:
 Gerald and I have (independently) started playing with the American
 Fuzzy Lop fuzzer recently [1] as a possibly more intelligent
 alternative or complement to our current fuzzing set-up.

 It includes a tool afl-cmin that uses its instrumentation to find
 unnecessary files in a set of inputs (i.e. files that don't exercise
 any new paths compared to the rest of the inputs). As an experiment, I
 ran this tool against tshark -nr on our currently available public
 menagerie folder and it cut it about in half.

 Before: 5726 files, 1.8G
 After: 2423 files, 764M

 I suspect with tshark -nxVr there are more paths and fewer
 duplicates (and it would also take a lot longer to run the script) but
 it may be worth investigating regardless. If anybody else is curious
 about the results I've made the minimized file list available at [2].
Cool, great job! :-)


 Cheers,
 Evan

 [1] http://lcamtuf.coredump.cx/afl/
 [2] https://dl.dropboxusercontent.com/u/171647/mini-menagerie
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe