I believe the correct answer is: all the things
If your super fast (~ native speed) fuzzer works on MacOS binaries (without source code), what do you fuzz? #CapstoneInside #KeystoneInsidepic.twitter.com/92ggdGdrsd
-
-
-
to take advantages of this fuzzer, i want to focus on binary-only apps of MacOS (those are not open source)
-
I guess: Little Snitch, 1Password, Dropbox? Some might require some kind of network harness though to get better code coverage..
End of conversation
New conversation -
-
-
So you used capstone/keystone to inject instrumentation/observe the execution? Nice! Does this work with linux + ELF too?
-
Yes, it works very well for Linux
-
Any docs?
End of conversation
New conversation -
-
-
maybe take a look at sips and qlmanage -p / -t
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
try fuzzing asr
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Look at /System/Library/Frameworks and let it rain
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
When are you providing more details on this? Are you looking to drop this at a conference next year?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
it's used on the iOS restore/update system to flashing the main filesystem. I believe it's closed source
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.