Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Re: Looking for a fuzzer/source code analyzer on customer developed code

Subject: Re: Looking for a fuzzer/source code analyzer on customer developed code
Date: Tue, 18 Mar 2008 10:10:40 +0100
Dunno if it's what you really need, but had the same need
time ago.
I solved it with a script that put in parallel many bash scripts
(in Linux off course) that used netcat, dd and a small implemetation
of the mersenne twister random number generator
(http://www.emcy.it/wiki/doku.php?id=prod:produzioni_minori#mtrng)
since /dev/random was not strong/fast enougth

Just fire the generator, put in pipe with dd if you whant to limit the
ammount of data with the count parameter, then pipe to netcat to
connect it to your server

Hope it helps

=M=


2008/3/17, sudhakar@cs.princeton.edu <sudhakar@cs.princeton.edu>:


 Hi all,

 I am looking for a good fuzzer, against some custom code developed
 internally. I am looking for a tool to stress test application by:

 - open many netork connections to application
 - throw random data to applications to get them to crash
 - fuzz web services


   Idea is to add a quality gate for developers before they push code out.

 Does anyone have any ideas on how to approach the problem? Any source code
 analyzer out there to do this?


 Thanks in advance for your ideas.


 Regards,
 --Sudhakar



 ------------------------------------------------------------------------
 This list is sponsored by: Cenzic

 Need to secure your web apps NOW?
 Cenzic finds more, "real" vulnerabilities fast.
 Click to try it, buy it or download a solution FREE today!

 http://www.cenzic.com/downloads
 ------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>