https://github.com/fuzzstati0n/fuzzgoat

A vulnerable C program for testing fuzzers.
https://github.com/fuzzstati0n/fuzzgoat

Last synced: 2 months ago
JSON representation

A vulnerable C program for testing fuzzers.

• Host: GitHub
• URL: https://github.com/fuzzstati0n/fuzzgoat
• Owner: fuzzstati0n
• License: other
• Created: 2017-06-07T03:35:34.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2022-11-10T08:58:34.000Z (about 2 years ago)
• Last Synced: 2024-08-03T02:02:48.483Z (5 months ago)
• Language: C
• Homepage:
• Size: 25.4 KB
• Stars: 191
• Watchers: 7
• Forks: 64
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-vulnerable-apps - Fuzzgoat - A vulnerable C program for testing fuzzers. (Uncategorized / Firmware)
• awesome-binary-analysis - Fuzzgoat

README

        
Welcome to Fuzzgoat

===================

This C program has been deliberately backdoored with several memory corruption bugs to test the efficacy of fuzzers and other analysis tools. Each vulnerability is clearly commented in fuzzgoat.c. Under input-files/ are files to trigger each vulnerability.

CAUTION: Do not copy any of this code - there is evil stuff in this repo.

Install AFL (American Fuzzy Lop)

------------------------

While Fuzzgoat can be attacked using any fuzzer, we like AFL. To install it:

1. Download AFL: [http://lcamtuf.coredump.cx/afl/releases/afl-latest.tgz](http://lcamtuf.coredump.cx/afl/releases/afl-latest.tgz)

2. Build AFL with `make install`

3. See the AFL quick start guide for more info: [http://lcamtuf.coredump.cx/afl/QuickStartGuide.txt](http://lcamtuf.coredump.cx/afl/QuickStartGuide.txt) 

Building Fuzzgoat

----------

Fuzzgoat builds with make. With afl-gcc in your PATH:

`make`

Running AFL

--------------------------

With afl-fuzz in your PATH and a seed file in a directory called in/

`afl-fuzz -i in -o out ./fuzzgoat @@` 

or simply:

`make afl`

Thank You

---------

Contributor: Joseph Carlos 

Fuzzgoat was adapted from udp/json-parser - we chose it because:

* Its not too big or cumbersome - ~1200 lines of C yet lots of paths for a fuzzer to dig into.

* Performance: its very fast at ~1500 execs per sec per core.

* The code is clean and very readable.

Fuzz Stati0n would like to thank the creators and maintainers of udp/json-parser.