XDiFF is an Extended Differential Fuzzing Framework built to find vulnerabilities. Its goal is to collect as much valuable data as possible and then to infer all potential vulnerabilities in the application/s. Vulnerabilities can either be found in isolated pieces of software or by comparing:
- Different inputs
- Different versions
- Different Implementations
- Different operating systems’ implementations
It is an open source Python fuzzer able to test multiple pieces of software and inputs in parallel. It can run on multiple OSs (Linux, Windows, OS X, and Freebsd). The fuzzer’s main goal is to detect differential issues aided with the extended capabilities, but since will also trigger hangs and crashes is also capable of attaching a debugger to detect memory errors.
Quick guide
Please follow the following steps:
- Install XDiFF
- Define the input
- Define the software
- Run the fuzzer
- Analyze the output
- …......
- Profit!
The tool and the fuzzing process can be susceptible to code execution. Use it at your own risk always inside a VM.
Authors
- Fernando Arnaboldi – Initial work
- cclauss
Also Read: Black Hat Arsenal Europe 2017 Tool List
Hello, Viewers We offer timely analysis and in-person experiences that form the basis of our professional articles. Our editorial section is a reflection of the emerging technology trends. Our tagline “Fresh News of Technology and More” tries to address the same diversity. 
No comments:
Post a Comment