https://github.com/IOActive/XDiFF
Extended Differential Fuzzing Framework
https://github.com/IOActive/XDiFF
Last synced: 7 months ago
JSON representation
Extended Differential Fuzzing Framework
- Host: GitHub
- URL: https://github.com/IOActive/XDiFF
- Owner: IOActive
- Created: 2017-11-06T01:10:00.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2018-04-13T06:38:59.000Z (almost 8 years ago)
- Last Synced: 2024-11-27T04:30:54.041Z (about 1 year ago)
- Language: Python
- Size: 380 KB
- Stars: 320
- Watchers: 22
- Forks: 56
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# What is XDiFF?
XDiFF is an Extended Differential Fuzzing Framework built for finding
vulnerabilities in software. It collects as much data as possible from
different executions an then tries to infer different potential vulnerabilities
based on the different outputs obtained.
The vulnerabilities can either be found in isolated pieces of software or by
comparing:
* Different inputs
* Different versions
* Different implementations
* Different operating systems' implementations
The fuzzer uses Python and runs on multiple OSs (Linux, Windows, OS X, and
Freebsd). Its main goal is to detect issues based on diffential fuzzing aided
with the extended capabilities to increase coverage. Still, it will found
common vulnerabilities based on hangs and crashes, allowing to attach a
memory debugger to the fuzzing sessions.
## Quick guide
Please follow the following steps:
1. [Install](https://github.com/IOActive/XDiFF/wiki/1.-Install) XDiFF
2. Define [the input](https://github.com/IOActive/XDiFF/wiki/2.-The-input)
3. Define [the software](https://github.com/IOActive/XDiFF/wiki/3.-The-software)
4. Run [the fuzzer](https://github.com/IOActive/XDiFF/wiki/4.-The-fuzzer)
5. Analyze [the output](https://github.com/IOActive/XDiFF/wiki/5.-The-output)
6. ...
7. Profit!
## Disclaimer
The tool and the fuzzing process can be susceptible to code execution.
Use it at your own risk always inside a VM.
## Authors
- Fernando Arnaboldi - _Initial work_
- [cclauss](https://github.com/cclauss)
For contributions, please propose a [Changelog](https://github.com/IOActive/XDiFF/wiki/Changelog) entry in the pull-request comments.
## Acknowledgments
Thanks Lucas Apa, Tao Sauvage, Scott Headington, Carlos Hollman, Cesar Cerrudo, Federico Muttis, Topo for their feedback and Arlekin for the logo.
## License
This project is licensed under the GNU general public license version 3.
## Logo
