0-day? More like 4260-day!

by DG under sulley, fuzzing
TL;DR As the title suggests there are no zero days disclosed here. This blog post is a narrative of my first encounters setting up and running the Sulley Fuzzing Framework. I rediscovered a very old bug in a very old and unsupported piece of software, but learned a lot along the way! INTRO I wanted to learn the Sulley Fuzzing Framework. I read Fuzzing: Brute Force Vulnerability a few years ago, and I ended up doing some simple file type and ActiveX fuzzing, but I never took the time to learn the fuzzing framework discussed in the book. I
Read More